EMHS is providing an update and information regarding the cybersecurity incident reported on March 5, 2025.

 By way of background, on March 3, 2025, EMHS detected unauthorized activity on its internal computer network. Within minutes of the discovery, EMHS personnel initiated measures to mitigate the impact, which included proactively shutting down software systems/servers and internet access out of an abundance of caution. These proactive measures caused us to modify certain services and procedures. Additionally, we retained cybersecurity professionals experienced in handling these types of incidents and alerted law enforcement.

 Through our comprehensive investigation, we learned that an unauthorized actor gained unauthorized access to the network for less than 20 minutes. None of our external or cloud-based systems, including our email and EHR (Electronic Health Records) systems were impacted. We are also pleased to report that no patient or employee personal information was compromised as a result of the incident.

 The privacy and security of information maintained by EMHS is of the upmost importance, and we take many precautions to safeguard this information and provide exceptional patient care. We are taking all necessary actions to address this situation by enhancing security measures to minimize the risk of a similar incident in the future. We expect to be fully functional in the coming days.