Myrtue Medical Center investigates major cyberattack linked to "Worldleaks" threat group

Myrtue Medical Center is investigating a significant data breach after detecting suspicious activity on its computer systems earlier this month, signaling a potential compromise of sensitive patient and operational data. The breach, discovered on June 13, prompted immediate cybersecurity measures and the launch of a forensic investigation, the hospital confirmed.

While the full scope of the breach remains under investigation, a threat actor known as Worldleaks claimed responsibility for the attack on June 24 via the Tor network. The group alleges it exfiltrated 1.2 terabytes of data — a total of 806,625 files — from the hospital’s systems. Myrtue Medical Center has not yet verified the accuracy of these claims or disclosed how many individuals may have been affected.

The hospital said it is currently working to determine the specific types of information that were compromised and to identify all impacted individuals. No timeline has been provided for the completion of the investigation.

In response to the incident, Myrtue Medical Center took swift action to secure its network. The hospital disconnected remote access, changed administrative credentials, and implemented enhanced security protocols across its systems. A specialized third-party cybersecurity firm was brought in to conduct a thorough forensic analysis, which remains ongoing.

The method of intrusion has not been publicly disclosed, but the hospital’s rapid detection and mitigation steps suggest the possibility of unauthorized remote access or compromised credentials.

Given the volume of data reportedly stolen and the involvement of a known cybercriminal group, the breach is being treated with the utmost seriousness. In the interim, Myrtue Medical Center is advising patients and other potentially affected individuals to monitor their financial accounts and credit reports for signs of suspicious activity. Officials recommend placing a fraud alert or credit freeze with Equifax, Experian, and TransUnion as a precaution.

Those seeking more information or wishing to inquire about potential exposure can contact a dedicated toll-free hotline at 866-905-8124, available Monday through Friday from 9:00 a.m. to 9:00 p.m. CST (excluding U.S. national holidays). Written notifications will be mailed to affected individuals once the hospital’s review is complete.