Kettering Health Ransomware Attack Disrupts Care

In May 2025, Kettering Health, a major Ohio healthcare network, was hit by a ransomware attack by the Interlock group, leading to widespread outages of electronic health record systems and forcing staff to use manual processes. Interlock stole and leaked 941 GB of sensitive data, including patient records, employee information, payroll, financial documents, and police department files. The breach disrupted patient care, resulted in canceled medical procedures, impacted communications, and created ongoing difficulties for patients seeking care or medication refills. Kettering Health has restored core electronic health record functionality and implemented enhanced cybersecurity measures, such as network segmentation and updated access controls, with both internal and external reviews confirming threat removal. The organization did not pay a ransom, and the public leak of data indicates negotiations with Interlock failed. Kettering Health continues working to fully restore services and protect against future cyberattacks.