Incident Response to Ransomware at a U.S. SLTT Hospital

A ransomware attack on a U.S. SLTT hospital disrupted critical systems supporting patient care, including lab reporting, medication distribution, and patient services—highlighting the severe real-world impact cyber incidents can have on healthcare operations. The incident underscores the growing risks faced by under-resourced public health entities.

This case study examines how the Multi-State Information Sharing and Analysis Center Cyber Incident Response Team (CIRT) responded to contain the threat and support recovery, while also emphasizing how funding cuts and resource constraints continue to challenge SLTT healthcare organizations’ ability to defend against evolving cyber threats.