Kettering Adventist Health now notifying patients affected by May 2025 ransomware attack

Kettering Adventist Health experienced a ransomware attack attributed to the InterLock gang, with access reportedly beginning April 9, 2025, leading to a system-wide outage for over two weeks and significant care disruptions; InterLock later listed the victim on its leak site and appears to have published about 950 GB of exfiltrated data potentially containing PHI and other sensitive records. Kettering disclosed the incident, reported it to HHS with a placeholder number, did not confirm ransom payment, and faces emerging lawsuits, while their notifications reportedly did not state that patient data had been leaked.