Incident

New York State hospitals attacked by ransomware


Learn More

The Lockbit ransomware group has taken responsibility for breaching two major hospitals, Carthage Area Hospital and Claxton-Hepburn Medical Center -  critical healthcare providers serving a substantial population in upstate New York.

The cyber attack occurred at the end of August, causing severe consequences on the hospitals in subsequent weeks. Phone systems were restored by September 2 but various other services remained impacted.

As a precaution, the emergency rooms at Carthage and Claxton were temporarily diverted, directing patients to nearby hospitals and rescheduling appointments.

The hospitals are still grappling with the aftermath of the cyberattacks, prompting an ongoing investigation by the FBI, New York State Department of Health, and the Division of Homeland Security and Emergency Services. Claxton-Hepburn Medical Center, in particular, continues to cancel outpatient appointments, struggling to recover.

No details are available about exposed data or number of impacted individuals.

The LockBit ransomware gang has threatened to leak alleged stolen data by September 19, 2023, if the ransom is not paid; however, no proof of the hack has been presented yet.

New York State hospitals attacked by ransomware