According to The HIPAA Journal, South Carolina nonprofit health system AnMed confirmed on July 26, 2026 a cybersecurity disruption involving malware that took down computers, phones and internet and forced 83 of its 106 facilities to close temporarily [1]. The Gentlemen ransomware group claimed responsibility and alleged theft of 6TB of patient data; AnMed said the claims are unverified and under investigation and it will notify if they prove correct [1]. AnMed advises patients to remain cautious with electronic messages appearing to come from AnMed and says patients are not required to confirm appointments electronically at this time [1].
This event has not been officially confirmed. Content is based on media or third-party reports.
Backfill: this event became public on Jul 26, 2026 and we added it on Nov 11, 2026. It is not a new event.
HighMonitoringBackfillMedia reported
US South Carolina health system AnMed hit by malware attack, 83 facilities temporarily closed
1 min read
- Disclosed
- Jul 26, 2026
- Occurred
- Jul 26, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
Timeline
Technical details
Remediation
Vendor guidance
- 1Be cautious with messages verify[1]
Be cautious with electronic messages appearing to come from AnMed; electronic appointment confirmation is not required.
References
Media1
- [1]The HIPAA Journal2026-08-13Accessed 2026-11-11Snapshot 2026-11-11 sha256 da1d36531548
“On Sunday, July 26, 2026, the health system confirmed that it had experienced “a cybersecurity disruption involving malware,” which forced it to close AnMed Medical Group offices and AnMed Imaging Services on Monday.”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.