Mount Graham Regional Medical Center ransomware attack disrupts hospital information systems

Mount Graham Regional Medical Center disclosed that a ransomware attack occurred on September 13, 2023, and was detected on September 27. The hospital experienced disruption to communications and information systems, prompting activation of incident command, downtime procedures and system restoration efforts. Staff used contingency workflows while maintaining essential patient care. The organization reported that the impact on patient experience was limited, that its medical record system was not compromised and that payroll and accounts payable commitments were fulfilled. Internal system access and the patient portal were restored by October 13. The supported material consequence was degradation of hospital digital and administrative workflows, not a confirmed suspension of clinical treatment.