Overview
- Interlock’s May attack forced Kettering Health to shut down all computer systems, disrupting patient care and canceling procedures.
- Kettering Health restored core components of its Epic electronic health record system on June 2.
- On June 4, Interlock published 941 gigabytes of data allegedly containing patient health information, employee records and internal documents.
- The healthcare network said it did not pay any ransom and is continuing efforts to rebuild and secure its IT infrastructure.
- Interlock has targeted U.S. healthcare providers since September 2024, with previous breaches including a major attack on DaVita.