Loading story…
Mile Bluff Medical Center in Mauston, Wisconsin disclosed a security incident involving data encryption that disrupted some phone and computer functions across the organization. The hospital said it immediately activated security protocols, began an investigation with internal specialists and third-party partners, and moved clinical teams to downtime procedures to preserve continuity of care while systems were affected.
Hospital leadership said the disruption was limited, temporary, and narrow in scope, and that patient safety was maintained during the response. Public reporting indicated no criminal group had claimed responsibility at the time of disclosure, while Mile Bluff's public statement and follow-on reporting framed the event as a contained cyber incident that affected operational technology and communications rather than halting care delivery.
See the actors and campaigns active against you right now.
3 events from the most recent confirmed update back to the earliest known activity.
Subsequent reporting said there had been no additional public update from Mile Bluff Medical Center and no criminal group had publicly claimed responsibility for the incident at that time.
Mile Bluff publicly stated that clinical teams had shifted to downtime procedures to maintain continuity of care and that patient safety was maintained. CEO Dara Bartels said the impact was limited, temporary, and narrow in scope.
Mile Bluff Medical Center disclosed that it experienced a security incident involving data encryption that disrupted some phone and computer system functions. The organization said it immediately activated security protocols and began investigating with internal experts and third-party partners.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See the adversaries and campaigns active against your sector right now, ranked by what they're exploiting.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Belgian hospital **AZ Monica** (campuses in Antwerp and Deurne) shut down all servers after a cyberattack discovered around **06:30** local time, forcing the organization to cancel scheduled care and operate emergency services at reduced capacity. With staff unable to access electronic patient records, the hospital postponed non-urgent consultations and procedures, shifted to paper-based registration, and transferred **seven critical-care patients** to other hospitals as a precaution; reporting also indicates **~70 planned operations were cancelled** and **~70 patients** were sent home. Authorities were notified and a criminal investigation is underway, with the public prosecutor involved and Belgium’s federal police cybercrime unit reported on site. Public reporting has not yet confirmed whether systems were encrypted or whether any ransom/extortion demand was made. Separately, Central Maine Healthcare in the U.S. reported a prior-year breach affecting **145,381** individuals after attackers maintained access for over two months, but that incident is unrelated to the AZ Monica disruption.
Jun 29, 2026
A ransomware attack forced the University of Mississippi Medical Center to take major systems offline, disrupting its phone network, broader IT environment, and Epic electronic health record platform. UMMC closed all 35 clinics across Mississippi, canceled appointments including chemotherapy and elective procedures, and shifted staff to paper documentation while keeping hospitals and emergency departments open. The medical center said it was working with the FBI, outside cybersecurity specialists, and vendors to investigate the intrusion and restore operations. UMMC later reopened clinics as systems were gradually brought back online, but the fallout extended beyond the immediate outage. Subsequent reporting said the incident may have exposed the organization to potential federal privacy-law issues, raising questions about whether protected health information was adequately safeguarded during the attack. The case highlights how ransomware against healthcare providers can quickly disrupt patient care, delay treatment, and create regulatory risk alongside operational recovery.
Jun 29, 2026
The **University of Mississippi Medical Center (UMMC)** reported a **ransomware attack** that knocked multiple IT systems offline, including access to its *Epic* electronic health record (EHR) platform, triggering the organization’s emergency operations plan. The disruption forced UMMC to **close all 35 clinics statewide** and **cancel outpatient, elective, and clinic procedures**, while hospital and emergency services remained open under contingency operations. UMMC stated the attackers have been in communication and that it is working with external specialists and law enforcement; the **FBI is investigating** and warned the duration of the outage was unknown at the time of reporting. Separate reporting also described a different municipal incident in **Meriden, Connecticut**, where officials took city internet services and public Wi‑Fi offline after an attempted disruption; emergency services were reported as unaffected and the city said it would conduct a comprehensive review before restoring service.
Jun 29, 2026