Singing River Health System temporarily shut down select systems after identifying a potential cyber incident in December 2025. MyChart access and phones were disrupted before the portal was restored later that day. A later health-system notice confirmed unauthorized network access Dec. 19-21 and access to files containing patient information.
The incident is confirmed to be cyber-related, but the specific attack mechanism is unknown.
An unauthorized party accessed or viewed data without evidence that the data was copied, removed, altered, or publicly disclosed.
Internal or external network connectivity was unavailable or materially impaired.
Telephone, voice-over-IP, call-center, or related voice communication services were unavailable or materially impaired.
The incident may involve extortion, but available evidence does not establish which extortion indicators were present.
DysruptionHub assesses with high confidence that Singing River Health System experienced a cyber incident and material technology disruption in December 2025. Our Dec. 26 report documented the health system’s Dec. 23 shutdown of select systems, including internet access, with temporary MyChart unavailability and intermittent phone problems. A May 2026 notice from the health system later confirmed unauthorized network access Dec. 19-21 and access to files containing patient information.
The health system said hospitals and clinics remained open and procedures continued as scheduled. The temporary MyChart disruption affected patients’ electronic access; intermittent phone problems affected communications. Singing River said MyChart was fully restored by the evening of Dec. 23.
MyChart was restored Dec. 23, and public reporting said operations returned after the precautionary shutdown. The health system began mailing data-incident notices May 19, 2026. Comparitech reported that the corresponding HHS breach filing listed 53,888 people affected. No reviewed source establishes the full restoration date for every system; with the last documented operational impact on Dec. 23, this retrospective record is presumed resolved.
The health system’s later notice establishes unauthorized access and patient-file exposure. The health system’s notice does not give a patient count; Comparitech reported 53,888 in the HHS filing. Comparitech observed an Anubis leak-site post claiming data from Singing River, but neither the health system nor independent investigation has confirmed that group’s responsibility, the amount it claimed to have taken, or a causal connection to the December outage. The specific attack mechanism remains unestablished.
Initial access, whether an extortion demand occurred, final confirmed exposure count and complete restoration timeline remain unresolved.
Comparitech observed an Anubis leak-site post naming Singing River Health System and showing purported file samples. The health system confirmed unauthorized access in December 2025 but did not acknowledge Anubis or confirm its theft-volume and ransom claims. This is a victim-site allegation, not established attribution or proof that Anubis caused the December service interruption.
Biloxi contains a Singing River medical clinics. Systemwide MyChart and phone issues do not establish a facility-specific closure there.
D'Iberville contains a Singing River specialty clinics. Systemwide MyChart and phone issues do not establish a facility-specific closure there.
Gautier contains a Singing River specialty clinic. Systemwide MyChart and phone issues do not establish a facility-specific closure there.
Gulfport contains a Singing River hospital and medical clinics. Systemwide MyChart and phone issues do not establish a facility-specific closure there.
Hurley contains a Singing River medical clinic. Systemwide MyChart and phone issues do not establish a facility-specific closure there.
Jackson County covers the Pascagoula and Ocean Springs hospital area, but the health system also serves Gulfport in Harrison County.
Ocean Springs contains a Singing River hospital and medical clinic. Systemwide MyChart and phone issues do not establish a facility-specific closure there.
Pascagoula is the health system's administrative and hospital anchor; MyChart disruption was system-wide, not limited to this city.
Perkinston is an additional physical clinic community of the affected health system; a clinic-specific closure is not established.
Vancleave contains a Singing River medical clinic. Systemwide MyChart and phone issues do not establish a facility-specific closure there.
We reported that Singing River briefly shut down select systems, including internet, on Dec. 23, disrupting MyChart access and causing intermittent phone problems while hospitals and clinics remained open.
The health system said an unauthorized party accessed its systems Dec. 19-21, 2025, and certain files containing patient information. It began mailing notices May 19, 2026.
Comparitech observed an Anubis leak-site claim naming Singing River and reported 53,888 people in the May 2026 HHS breach filing; it could not verify the group’s involvement.
Signed-in members can report an error, update, or missing source.
