Incident BriefingsArdent Health Services security incident

Ardent Health Services security incident

Ransomware. ER patients diverted across multiple states.

Last modified

Summary

  • Environment: Hospital system (30 hospitals)
  • Operational impact: ER patients diverted across multiple states
  • Financial impact: No financial figure is established by the reviewed source evidence
  • Record status: Developing record. Reviewed September 19, 2026; updated as evidence emerges.

What happened

In 2023, Ardent Health Services experienced an incident in its hospital system (30 hospitals) environment. The retained source describes the attack path as follows: Ransomware. [1]

The documented consequence was: ER patients diverted across multiple states. [1]

Impact

  • Documented impact: ER patients diverted across multiple states. [1]
  • No financial loss, ransom amount, recovery cost, or regulatory penalty is established by the reviewed source evidence.

Threat Group & Attack Vector

The retained source describes the attack path as follows: Ransomware. The canonical record does not add intrusion steps beyond those supported by the source. [1]

Actors

  • No threat actor group has been identified in the reviewed public evidence.

TTPs

Response

The reviewed source does not describe containment, notification, or restoration steps in enough detail to summarize them responsibly.

This account is bounded to Ardent Health Services Reports Information Technology Security Incident. Details absent from that evidence are left unresolved rather than inferred. [1]