Overview

• Interlock’s May attack forced Kettering Health to shut down all computer systems, disrupting patient care and canceling procedures.
• Kettering Health restored core components of its Epic electronic health record system on June 2.
• On June 4, Interlock published 941 gigabytes of data allegedly containing patient health information, employee records and internal documents.
• The healthcare network said it did not pay any ransom and is continuing efforts to rebuild and secure its IT infrastructure.
• Interlock has targeted U.S. healthcare providers since September 2024, with previous breaches including a major attack on DaVita.