The health system disabled its network after suspicious activity, leaving MyChart and doctor searches unavailable and directing urgent medical needs to phone calls or walk-in clinics.
Billing and telephone services have been restored, but INC Ransom claims to have stolen sensitive infrastructure records and threatens further disruption.
Drivers and carriers lost phone help with federal registration. Online tickets and chat remained available, and DOT said agency data was not compromised.