Industry - Data Breach
Executive Summary
Minidoka Memorial Hospital in Idaho experienced a cyberattack on April 5 that disrupted internal systems and imaging services, forcing some emergency patient transfers though the hospital continued operations. A threat group called "Blackwater" later claimed to have stolen approximately 576 GB of data comprising over 2.3 million files and threatened to leak it after April 24, though they provided no proof of their claims. The incident affects patient data at the rural hospital, though the ful...
What Happened
On April 5, 2026, Minidoka Memorial Hospital in Rupert, Idaho experienced a cyberattack that disrupted internal systems and imaging services, forcing some emergency patients to be transferred to other facilities. On April 17, a threat group calling itself "Blackwater" added the hospital to their dark web site, claiming to have stolen approximately 576 GB of data containing over 2.3 million files, with a threatened leak date of April 24. The threat actors provided no proof of their claims and did not indicate whether they encrypted any hospital data.
Who Is Affected
Patients who received care at Minidoka Memorial Hospital are potentially affected if the threat actors' claims are valid. The hospital is a rural facility in Idaho, and the disruption forced some emergency patients to be transferred elsewhere for treatment. The full scope of compromised patient information remains unclear as the hospital has not confirmed what data, if any, was accessed.
Why It Matters
This incident highlights the ongoing vulnerability of healthcare facilities, particularly smaller rural hospitals, to cyberattacks that can disrupt critical patient services. The emergence of "Blackwater" as a potentially new ransomware group demonstrates the evolving threat landscape facing healthcare providers. Healthcare data breaches are particularly serious because medical records contain sensitive personal, financial, and health information that cannot be changed like passwords or credit cards.
What You Should Do
Patients of Minidoka Memorial Hospital should monitor the hospital's official communications for updates about what data may have been compromised. Request clarification from the hospital about whether your personal information was affected and what protections are being offered. Monitor financial accounts and credit reports for suspicious activity, and consider placing fraud alerts with credit bureaus if the hospital confirms a data breach affecting your records.
AI-Assisted
Event summaries are generated by Claude AI from verified sources and reviewed by humans before publication.