Idaho clinics reopen after Gritman cyber incident
pGritman says outpatient disruptions began earlier in the week while the hospital and emergency department remained open and no patient data was compromisedppGritman Medical Center began reopening clinics in Moscow Idaho on Friday after a cybersecurity incident disrupted outpatient care beginning early Wednesday though the hospital and emergency department remained open throughoutppGritman first publicly disclosed the problem Thursday saying several primary and specialty clinics were closed because of an electronic systems outage In an update later that night the health system said a number of clinics would remain closed Friday including Downtown Clinic Westside Clinic general surgery and gastroenterology orthopedic surgery therapy pain sleep urology and several family medicine locationsppBy Friday Gritman said electronic systems were coming back online following what it described as a cybersecurity incident QuickCARE reopened Friday on its regular schedule and the provider said it expected to resume normal clinic operations Monday April 6ppKHQ reported the disruption had begun earlier with clinics going offline early Wednesday That suggests the operational impact began April 1 though April 2 is the first confirmed public notice issued by the providerppGritman said Friday that preliminary findings showed no successful access to its electronic systems and no compromise of patient or other secure data Officials have not identified the nature of the incident or attributed it to any actor and no public claim of responsibility or extortion demand has surfaced DysruptionHub did not receive a response to an emailed request for commentppThe clearest impact was on outpatient care Gritman said appointments were being rescheduled and that staff would remain available by phone to help patients reach their preferred locations The hospital including the emergency department remained open during the outage and the provider directed anyone with a medical emergency to call 911 or go to the emergency departmentpp
Chip in once
If this reporting helped you a onetime tip helps cover hosting tools and future investigations
pp
Support us monthly
A small monthly pledge keeps independent coverage and our reader tools online for everyone
ppGritman is a nonprofit critical access hospital based in Moscow that says it operates 16 regional clinics and employs more than 700 people across the Palouse Moscow has also experienced other recent cyberrelated disruption In October 2025 Moscow School District 281 disclosed a separate cyber incident after shutting down its network while classes remained in sessionppThe outage fits a broader pattern in recent healthcare cyber incidents in which outpatient and business operations are disrupted first while hospitals remain open under downtime procedures and the exact cause remains unclear for days In February University of Mississippi Medical Center said a cyberattack knocked multiple IT systems offline including Epic forcing statewide clinic closures and canceling outpatient visits procedures and imaging Livingston HealthCare in Montana also continued treating patients after a February cybersecurity incident though phones and network services were disrupted and some systems remained limited during recovery In October Colorados Family Health West shut down electronic systems after detecting a cyberattack continued care on manual workflows and initially said there was no evidence of data theft or encryptionppThe investigation now turns on three questions when Gritman first detected the incident which systems were affected and whether the providers early assurance that no patient data was compromised holds up under forensic reviewppA collaborative project to bring you the latest cyberattacks impacting the availability of services and goods in the United Statespp
Local reporting later found the July 2025 attack knocked out email and parking kiosks and ended in a 500000 insurancebacked settlement
pp
Officials said the city isolated the threat while Leon County cut a network connection as a precaution and warned of possible outages tied to shared applications
pp
Officials say the threat was detected early and contained before it could become a more serious incident
pp
City says missing records inaccessible systems and wiped devices found after an administrative transition prompted requests for state and federal help
pp
District officials said an outside actor accessed some systems prompting a shutdown that canceled classes child care and afterschool programs Monday
pp
How we use documented disruption and DDCIT to focus on US incidents that actually break services
pp
How cyber breach statements reassure the public without saying much at all
pp
This is an opinion column from DysruptionHub publisher Joseph Topping about attribution and local news coverage of cyberattacks It departs from our usual incident reports and analysis
Golf Manor Ohio
pp
How a Reddit theory CTI echo chamber and a vanished article show why cyber incidents need verification
pp
A year of lost records stalled home sales and hard lessons in local government cybersecurity
ppppGreat Check your inbox and click the linkppSorry something went wrong Please try againpp
Brockton hospital diverted ambulances and shifted to paper records while some cancer and pharmacy services were paused Monday
pp
The behavioral health provider said connectivity and some business operations were disrupted as investigators reviewed the scope of the incident and a Qilin leaksite claim
pp
University of Mississippi Medical Center says Epic records system is down outpatient appointments canceled statewide
pp
Livingston HealthCare says some systems remain limited while recovery continues
pp
Local reporting later found the July 2025 attack knocked out email and parking kiosks and ended in a 500000 insurancebacked settlement
pp
Officials said the city isolated the threat while Leon County cut a network connection as a precaution and warned of possible outages tied to shared applications
pp
Officials say the threat was detected early and contained before it could become a more serious incident
pp
District officials said an outside actor accessed some systems prompting a shutdown that canceled classes child care and afterschool programs Monday
p
Chip in once
If this reporting helped you a onetime tip helps cover hosting tools and future investigations
pp
Support us monthly
A small monthly pledge keeps independent coverage and our reader tools online for everyone
ppGritman is a nonprofit critical access hospital based in Moscow that says it operates 16 regional clinics and employs more than 700 people across the Palouse Moscow has also experienced other recent cyberrelated disruption In October 2025 Moscow School District 281 disclosed a separate cyber incident after shutting down its network while classes remained in sessionppThe outage fits a broader pattern in recent healthcare cyber incidents in which outpatient and business operations are disrupted first while hospitals remain open under downtime procedures and the exact cause remains unclear for days In February University of Mississippi Medical Center said a cyberattack knocked multiple IT systems offline including Epic forcing statewide clinic closures and canceling outpatient visits procedures and imaging Livingston HealthCare in Montana also continued treating patients after a February cybersecurity incident though phones and network services were disrupted and some systems remained limited during recovery In October Colorados Family Health West shut down electronic systems after detecting a cyberattack continued care on manual workflows and initially said there was no evidence of data theft or encryptionppThe investigation now turns on three questions when Gritman first detected the incident which systems were affected and whether the providers early assurance that no patient data was compromised holds up under forensic reviewppA collaborative project to bring you the latest cyberattacks impacting the availability of services and goods in the United Statespp
Local reporting later found the July 2025 attack knocked out email and parking kiosks and ended in a 500000 insurancebacked settlement
pp
Officials said the city isolated the threat while Leon County cut a network connection as a precaution and warned of possible outages tied to shared applications
pp
Officials say the threat was detected early and contained before it could become a more serious incident
pp
City says missing records inaccessible systems and wiped devices found after an administrative transition prompted requests for state and federal help
pp
District officials said an outside actor accessed some systems prompting a shutdown that canceled classes child care and afterschool programs Monday
pp
How we use documented disruption and DDCIT to focus on US incidents that actually break services
pp
How cyber breach statements reassure the public without saying much at all
pp
This is an opinion column from DysruptionHub publisher Joseph Topping about attribution and local news coverage of cyberattacks It departs from our usual incident reports and analysis
Golf Manor Ohio
pp
How a Reddit theory CTI echo chamber and a vanished article show why cyber incidents need verification
pp
A year of lost records stalled home sales and hard lessons in local government cybersecurity
ppppGreat Check your inbox and click the linkppSorry something went wrong Please try againpp
Brockton hospital diverted ambulances and shifted to paper records while some cancer and pharmacy services were paused Monday
pp
The behavioral health provider said connectivity and some business operations were disrupted as investigators reviewed the scope of the incident and a Qilin leaksite claim
pp
University of Mississippi Medical Center says Epic records system is down outpatient appointments canceled statewide
pp
Livingston HealthCare says some systems remain limited while recovery continues
pp
Local reporting later found the July 2025 attack knocked out email and parking kiosks and ended in a 500000 insurancebacked settlement
pp
Officials said the city isolated the threat while Leon County cut a network connection as a precaution and warned of possible outages tied to shared applications
pp
Officials say the threat was detected early and contained before it could become a more serious incident
pp
District officials said an outside actor accessed some systems prompting a shutdown that canceled classes child care and afterschool programs Monday
p
