Cedar County Memorial Hospital in Missouri suffered a cyberattack discovered in August 2026 that disrupted its patient portal and electronic health record system. A hacking group calling itself Wallstreet claims it stole patient data, though this has not been verified, and the hospital’s investigation into exposed information is ongoing. Anyone who received care there should monitor credit reports and medical statements closely and watch for phishing attempts referencing hospital visits.
| Company | Cedar County Memorial Hospital |
|---|---|
| Industry | Healthcare |
| Data Types Exposed | Patient Names, Medical Records and Treatment History, Electronic Health Record Data, Medical Imaging Records, Protected Health Information |
| People Affected | Not Publicly Disclosed |
| Attack Method | Ransomware/Extortion |
| Regulators Notified | Not Publicly Disclosed |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Cedar County Memorial Hospital Data Breach?
Cedar County Memorial Hospital, located in El Dorado Springs, Missouri, disclosed that it suffered a cyberattack in August 2026. The Cedar County Memorial Hospital data breach disrupted the hospital’s information technology systems and forced staff to take affected computers offline. As a result, network access was paused while teams worked to protect the integrity of hospital systems.
The disruption had real consequences for patient care. The hospital’s patient portal and electronic health record system both went down. This outage affected every service across the hospital and its associated Medical Mall Clinic locations.
Because medical imaging systems could not transmit images to radiologists, the emergency department had to shift to partial diversion. This step was taken to protect patient safety while the hospital worked through the disruption. By late August 2026, the hospital reported that routine operations had resumed after internal and external teams completed full system reviews and safety checks.
The electronic health record system came back online after roughly two weeks offline. Meanwhile, staff began transferring manually recorded patient information back into the digital system. In September 2026, the hospital confirmed that its investigation into what data may have been compromised was still ongoing.
A relatively new cyber extortion and ransomware group known as Wallstreet has claimed responsibility for the attack. This group added Cedar County Memorial Hospital to its dark web leak site in late August 2026 and threatened to publish stolen files. However, the group’s claim has not yet been independently verified.
Who was affected?
The individuals affected by this incident are likely patients who received care at Cedar County Memorial Hospital or its affiliated Medical Mall Clinic. Because the electronic health record system was taken offline, anyone whose records were stored in that system could potentially be involved. The hospital has not yet said whether employee data was also affected.
At this time, the exact number of affected individuals has not been publicly disclosed. The hospital has stated that it will notify patients directly once the investigation and data review are complete. Given that the hospital serves the broader El Dorado Springs community in Missouri, the affected population could include patients of all ages, including minors who received pediatric or family care.
What Information Was Potentially Exposed?
Cedar County Memorial Hospital has not yet confirmed the full scope of data involved in this incident. However, because the attack affected the electronic health record system, sensitive patient information stored there could be at risk. The categories below reflect the types of information typically held in hospital record systems that were disrupted.
- Patient names
- Medical records and treatment history
- Electronic health record data
- Medical imaging records
- Protected health information
If this data was in fact accessed or stolen, patients could face a heightened risk of medical identity theft. For example, stolen health information can be used to file fraudulent insurance claims or obtain medical services under someone else’s name. This type of fraud can be especially hard to detect because it often does not show up on standard credit reports.
In addition, exposed medical records can lead to targeted phishing attempts. Scammers sometimes use real treatment details to make fraudulent emails or calls appear legitimate. As a result, affected patients should stay alert for suspicious messages referencing their medical history or hospital visits.
What is the company doing?
Cedar County Memorial Hospital took immediate action once it detected the attack. The hospital took affected systems offline and paused network access to contain the threat. In addition, internal and external technical teams conducted a full review before restoring normal operations in late August 2026.
The hospital has continued its investigation into the incident since restoring services. It has committed to notifying patients individually if the review confirms that personal or protected health information was compromised. This follow-up notification process is ongoing as the hospital works through its data review.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Affected individuals should regularly check their credit reports for unfamiliar accounts or inquiries. This is a simple, free way to catch signs of identity theft early. You can request free credit reports from each of the three major credit bureaus.
Because the investigation into this breach is still ongoing, it makes sense to check reports more often than usual for the next several months. If you notice any unauthorized activity, report it right away to the credit bureau and consider speaking with a data breach attorney about your options.
Watch for Medical Identity Theft
Since hospital record systems were disrupted, patients should watch closely for signs of medical identity theft. This can include unexpected medical bills, insurance denials, or unfamiliar entries in your health records. Review any explanation of benefits statements from your insurer carefully.
If you spot anything unusual, contact your insurance provider and the hospital immediately. Correcting fraudulent medical records can be a lengthy process, so early action matters. Keeping copies of your normal medical history can help you spot discrepancies faster.
Stay Alert for Phishing Attempts
Because attackers may have gathered contact details, affected patients should be cautious of unexpected emails, texts, or calls. Scammers often pose as hospitals, insurers, or government agencies to trick people into sharing more personal information. Never click links or share personal details in unsolicited messages.
Instead, if you receive a suspicious message claiming to be from Cedar County Memorial Hospital, contact the hospital directly using a verified phone number. This helps confirm whether the communication is legitimate. Taking this extra step can prevent falling victim to a secondary scam tied to the breach.
Consider a Credit Freeze or Fraud Alert
If further investigation confirms that Social Security numbers or financial details were exposed, placing a credit freeze can help block new accounts from being opened in your name. A fraud alert is a lighter-touch option that still requires lenders to verify your identity before extending credit. Both options are free to set up.
You can request either protection directly through the three major credit bureaus. Because the hospital’s investigation is still underway, taking this precaution now provides an added layer of protection while more details become available.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.