AnMed, a non-profit health system with four hospitals and more than 60 physician practices across northeast Georgia and upstate South Carolina, shut down dozens of departments on Monday after discovering a malware infection that took down its networks and phone systems across all facilities. Urgent care locations remain open, but imaging services, OBGYN clinics, primary care offices, and all medical group offices were closed as the organisation works to contain and recover from the incident. AnMed said it is coordinating with emergency medical services and regional hospitals to make sure patients can still get care in the meantime.
Healthcare cyberattacks have become a persistent and costly problem. IBM’s most recent data breach cost report found that for the twelfth consecutive year, the healthcare industry paid more per breach than any other sector — averaging $7.4 million per incident in 2025 — and that breaches in healthcare took more than five weeks longer to detect and contain than the cross-industry average. No ransomware group has publicly claimed responsibility for the AnMed attack, and the health system has not disclosed the specific type of malware involved or whether patient data was accessed.