Kettering Health
Disclosed May 20, 20251 year ago1,695,382 affectedConfirmed
Interlock ransomware cripples Kettering Health, exposes 1.7M people
A May 2025 ransomware attack forced Ohio's Kettering Health to cancel procedures during a system-wide outage; Interlock claimed it and leaked data after Kettering refused to pay. The network was first breached April 9, 2025, and Kettering later reported 1,695,382 affected people to HHS.
What is known
| People affected | 1,695,382 (as reported by the organization) |
|---|---|
| Disclosed | May 20, 2025 |
| Attack | Ransomware |
| Data exposed | Names, Social Security numbers, Financial, Government IDs, Health, Insurance, Credentials and tokens |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Kettering Health system-wide technology outageketteringhealth.org · The organization | The organization |
| Ransomware gang claims responsibility for Kettering Health hacktechcrunch.com · News | News |
| Kettering Health confirms Interlock ransomware behind cyberattackbleepingcomputer.com · News | News |
| Kettering Health hit by system-wide outage after ransomware attackbleepingcomputer.com · News | News |
| Largest Healthcare Data Breaches of 2025hipaajournal.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | May 20, 2025 | 1,695,382 |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.