DCH Health System in Alabama suffered a data breach incident after an employee improperly accessed 2,530 patients' records. The data accessed included patients’ names, addresses, date of birth, social security numbers, date of encounter, diagnoses, vital signs, medications, test results, and clinical/provider notes. The employee was suspended immediately upon detection of improper access.

Ransomware Attacks Disrupt Hospitals in the US and Australia A series of ransomware attacks has severely impacted healthcare operations in the United States and Australia, forcing hospitals to divert patients and cancel appointments. In Alabama, three hospitals DCH Regional Medical Center in Tuscaloosa, Fayette Medical Center, and Northport Medical Center were hit by ransomware on 1 October, leading to the temporary closure of their systems to all but critical new patients. Outpatient appointments were advised to be confirmed by phone before attendance, while elective surgeries scheduled for 2 October proceeded as planned. The operator, DCH Health System, warned that full recovery could take weeks. Meanwhile, in Australia, seven hospitals in Gippsland and southwest Victoria experienced similar disruptions, with some elective surgeries and appointments canceled. The Victorian Government Cyber Incident Response Service reported over 600 cyberattacks since July 2018, though the specific group behind the latest ransomware incidents remains unidentified. Hospitals in Victoria reverted to manual systems where possible to maintain services, though patient records and booking systems were affected. Cybersecurity experts, including UK-based specialist Kevin Beaumont, noted that ransomware groups are becoming increasingly sophisticated, targeting organizations with the intent to extort payments. The attacks highlight vulnerabilities in healthcare IT infrastructure, where disruptions can directly impact patient care. No ransom demands have been publicly disclosed in either case.