Kettering, OH — May 20, 2025 — Kettering Health has confirmed that a ransomware attack is behind the system-wide technology outage affecting all 14 of its medical centers, including the location in Piqua. The cyberattack, which began early Tuesday morning, has forced the cancellation of all elective inpatient and outpatient procedures across the network and disrupted call center operations.
Emergency rooms and clinics remain open, and Kettering Health has emphasized that it is continuing to provide safe, high-quality care using established backup protocols, hackers claim to have locked the network’s systems and accessed sensitive files. The note threatens to leak the allegedly stolen data unless Kettering Health negotiates a payment with the attackers. The cybercriminal group behind the attack has been linked to the ransomware gang known as Interlock, which has previously targeted organizations in the tech, manufacturing, and government sectors.
Kettering Health has not disclosed whether any data has been compromised or whether it intends to negotiate with the attackers. A spokesperson for the health system declined to comment beyond the initial statement.
IT teams and hospital leadership are actively working to restore systems and contain the impact of the breach. The health network is continuing to update the public as more information becomes available and is urging patience from the communities it serves.
Photo Credit: Kettering Health Network
