--- title: Campbell County Health Ransomware Attack Disrupting Patient Care - Interbit Data description: Since Friday morning, Campbell County Health in Gillette, Wyoming has been working to restore its computer systems and full patient care after falling victim to a ransomware attack. image: https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Imported_Blog_Media/ThinkstockPhotos-691203508-1-1.jpg --- [Skip to main content](https://interbitdata.com/blog/campbell-county-health-ransomware-attack-disrupting-patient-care#main-content) [Knowledge Base Login](https://knowledge.interbitdata.com/en/knowledge)     [Support](https://interbitdata.com/support/) [![Interbit Logo](https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Interbit%202026/Interbit%20Logos/logo-interbit-retina-svg.svg) ![Interbit Logo](https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Interbit%202026/Interbit%20Logos/logo-interbit-retina-svg.svg)](https://interbitdata.com) - [Show submenu for Solutions Solutions](https://interbitdata.com/solutions/beacon) - [Beacon Downtime](https://interbitdata.com/solutions/beacon/downtime) - [Beacon Delivery](https://interbitdata.com/solutions/beacon/delivery) - [Beacon Navigator](https://interbitdata.com/solutions/beacon/navigator) - [PatientPath](https://interbitdata.com/solutions/patientpath) - [Blog](https://interbitdata.com/blog) - Show submenu for Resources Resources - [Events](https://interbitdata.com/resources/events/) - [Resources](https://interbitdata.com/resources/success-stories/) - Show submenu for About Us About Us - [Meet the Team](https://interbitdata.com/about/team) - [Partners](https://interbitdata.com/about/partners) Open main navigation Close main navigation - Show submenu for Solutions Solutions - Solutions - [Solutions](https://interbitdata.com/solutions/beacon) - [Beacon Downtime](https://interbitdata.com/solutions/beacon/downtime) - [Beacon Delivery](https://interbitdata.com/solutions/beacon/delivery) - [Beacon Navigator](https://interbitdata.com/solutions/beacon/navigator) - [PatientPath](https://interbitdata.com/solutions/patientpath) - [Blog](https://interbitdata.com/blog) - Show submenu for Resources Resources - Resources - [Events](https://interbitdata.com/resources/events/) - [Resources](https://interbitdata.com/resources/success-stories/) - Show submenu for About Us About Us - About Us - [Meet the Team](https://interbitdata.com/about/team) - [Partners](https://interbitdata.com/about/partners) - Search - [Request a Demo](https://interbitdata.com/request-a-demo) [Request a Demo](https://interbitdata.com/request-a-demo) Search [Blog](https://interbitdata.com/blog) Tags - [Healthcare Information Systems](https://interbitdata.com/blog/tag/healthcare-information-systems) - [IT Challenges](https://interbitdata.com/blog/tag/it-challenges) - [Business Continuity](https://interbitdata.com/blog/tag/business-continuity) - [Cybersecurity](https://interbitdata.com/blog/tag/cybersecurity) - [Company News](https://interbitdata.com/blog/tag/company-news) - [Cyberattack](https://interbitdata.com/blog/tag/cyberattack) - [Cyberattacks](https://interbitdata.com/blog/tag/cyberattacks) Search - [Healthcare Information Systems](https://interbitdata.com/blog/tag/healthcare-information-systems) - [IT Challenges](https://interbitdata.com/blog/tag/it-challenges) - [Business Continuity](https://interbitdata.com/blog/tag/business-continuity) - [Cybersecurity](https://interbitdata.com/blog/tag/cybersecurity) - [Company News](https://interbitdata.com/blog/tag/company-news) - [Cyberattack](https://interbitdata.com/blog/tag/cyberattack) - [Cyberattacks](https://interbitdata.com/blog/tag/cyberattacks) [Business Continuity,](https://interbitdata.com/blog/tag/business-continuity) [IT Challenges,](https://interbitdata.com/blog/tag/it-challenges) [Healthcare Information Systems,](https://interbitdata.com/blog/tag/healthcare-information-systems) [Disaster Recovery,](https://interbitdata.com/blog/tag/disaster-recovery) [EHR Downtime,](https://interbitdata.com/blog/tag/ehr-downtime) [Cybersecurity](https://interbitdata.com/blog/tag/cybersecurity) # Campbell County Health Ransomware Attack Disrupting Patient Care by [Alex Konstantinovsky](https://interbitdata.com/blog/author/alex-konstantinovsky) Sep 24, 2019 Health IT Security By Jessica Davis | 9/23/2019 ## Since Friday morning, Campbell County Health in Gillette, Wyoming has been working to restore its computer systems and full patient care after falling victim to a ransomware attack. Campbell County Health in Gillette, Wyoming fell victim to a ransomware attack early Friday morning, which has continued to disrupt patient care for last few days. According to [officials](https://www.cchwyo.org/News/Press_Center/Health_News/2019/Service_Disruptions_at_CCH_no_ETA.aspx?furl=sd), the cyberattack began around 3:30 AM on Friday and caused “serious computer issues” that resulted in service disruptions, such as a lack of outpatient lab, respiratory therapy, or radiology exams. Some surgeries were canceled, and CCH stopped accepting new inpatient admissions. Patients that arrived at the emergency department or walk-in clinic on Friday were triaged and transferred to appropriate care facilities, if the situation warranted it. Officials said phone systems remained operational. However, they could not estimate when services would be restored. #### Dig Deeper - [As Ransomware Attacks Increase, DHS Alerts to Cybersecurity Insights](https://healthitsecurity.com/news/as-ransomware-attacks-increase-dhs-alerts-to-cybersecurity-insights) - [Ransomware Attacks Double in 2019, Brute-Force Attempts Increase](https://healthitsecurity.com/news/ransomware-attacks-double-in-2019-brute-force-attempts-increase) - [DHS Shares Best Practice Steps for Ransomware Resilience](https://healthitsecurity.com/news/dhs-shares-best-practice-steps-for-ransomware-resilience) By 2PM officials reported the cyber event was ransomware, and authorities were notified. Employees were told to call their managers, while patients were told to call ahead of their appointment to see if they were still scheduled during the ongoing attack. “We have processes in place to continue to treat inpatients appropriately and safely,” said Colleen Heeter, CCH chief operating officer, said in a statement. “Campbell County Health is very concerned about the security of information and the safety of our patients and employees,” officials said in a statement. “We understand the concern that the community has regarding this as well.” Patients continued to receive safe care during the attack, as officials said they worked with regional facilities to transfer patients if CCH was unable to provide adequate care. The emergency department has remained open with full staff during the event to evaluate care needs. What’s more, CCH Emergency Medical Services placed additional ambulances on call to serve the patients. Officials said they are working with local, state, and federal authorities to address the ransomware, while city officials, Campbell County Commissioners, and Campbell County Emergency Management are supporting CCH during the event. The walk-in clinic has also remained open during the attack. As of Saturday, service had not yet been restored. And officials notified patients that its maternal child department was only taking patients on a case-by-case basis. As a result, those patients were told to call ahead with any concerns or questions. The latest update on Sunday afternoon showed that services had not yet been restored. The EMS, ED, OB, and walk-in clinic departments have continued to assess and treat, or transfer patients when appropriate. Patients have been told to call ahead and bring medication bottles with them to their appointments. “Our patients are our highest priorities. We understand this is inconvenient and disruptive,” officials said in a statement. “At this point in time, there is no evidence that any patient data has been accessed or misused. The investigation is ongoing, and we will provide updates when more information becomes available. We are working diligently to restore complete access to our services.” The CCH security event bears hallmark to several recent reports from other healthcare providers, including a massive ransomware attack that impacted 100 [dental provider](https://healthitsecurity.com/news/ransomware-attack-on-digital-dental-records-impacts-many-providers) offices. In June, Ohio-based [NEO Urology](https://healthitsecurity.com/news/ohio-provider-pays-75k-ransom-after-serious-hack-on-it-system) paid its $75,000 ransomware demand to restore services, after three days without access to its computer systems. The provider was experiencing between $30,000 and $50,000 a day in revenue losses. Five other [providers](https://healthitsecurity.com/news/5-more-healthcare-providers-fall-victim-to-ransomware-attacks) reported similar attacks in June. Meanwhile, hackers demanded $1 million from Washington-based [Grays Harbor](https://healthitsecurity.com/news/hackers-demand-1m-in-grays-harbor-ransomware-attack) Community Hospital and Harbor Medical Group, which disrupted services for nearly two months. Reports did not shared whether the provider paid the ransomware. After a decline in ransomware attacks last year, the attacks have [doubled](https://healthitsecurity.com/news/ransomware-attacks-double-in-2019-brute-force-attempts-increase) in 2019. Researchers are seeing an increase in brute-force attacks, which can cause an average of 10 days of [downtime](https://healthitsecurity.com/news/ransomware-costs-on-the-rise-causes-nearly-10-days-of-downtime). Organizations across all sectors have seen an increase in these attacks, as well, which prompted the Department of Homeland Security to [released](https://healthitsecurity.com/news/dhs-shares-best-practice-steps-for-ransomware-resilience) two alerts meant to help businesses shore up their [defenses](https://healthitsecurity.com/news/as-ransomware-attacks-increase-dhs-alerts-to-cybersecurity-insights). Tags: [Business Continuity](https://interbitdata.com/blog/tag/business-continuity) [IT Challenges](https://interbitdata.com/blog/tag/it-challenges) [Healthcare Information Systems](https://interbitdata.com/blog/tag/healthcare-information-systems) [Disaster Recovery](https://interbitdata.com/blog/tag/disaster-recovery) [EHR Downtime](https://interbitdata.com/blog/tag/ehr-downtime) [Cybersecurity](https://interbitdata.com/blog/tag/cybersecurity) **[Alex Konstantinovsky](https://interbitdata.com/blog/author/alex-konstantinovsky)** Sep 24, 2019 ## Related Articles [![Cybersecurity is Clinical Infrastructure:  Why Hospitals Need a Resilience Strategy](https://21178601.fs1.hubspotusercontent-na1.net/hub/21178601/hubfs/Imported_Blog_Media/iStock-963458566-Jul-28-2026-07-39-32-7419-PM.jpg?width=500&height=500&name=iStock-963458566-Jul-28-2026-07-39-32-7419-PM.jpg) Cybersecurity is Clinical Infrastructure:  Why Hospitals Need a Resilience Strategy](https://interbitdata.com/blog/time-to-reframe-the-shiny-object-in-healthcare-it) [![EHR report distribution: 3 workflow basics for hospital efficiency](https://21178601.fs1.hubspotusercontent-na1.net/hub/21178601/hubfs/Blog%20Post_EHR%20Report%20Distribution.png?width=500&height=500&name=Blog%20Post_EHR%20Report%20Distribution.png) EHR report distribution: 3 workflow basics for hospital efficiency](https://interbitdata.com/blog/ehr-report-distribution-workflow-basics-for-hospital-efficiency) [![Is Your Hospital ETDBW?](https://21178601.fs1.hubspotusercontent-na1.net/hub/21178601/hubfs/Imported_Blog_Media/patientpath-conversation-1.png?width=500&height=500&name=patientpath-conversation-1.png) Is Your Hospital ETDBW?](https://interbitdata.com/blog/is_your_hospital-etdbw) [![Ponemon: Business continuity management vital for data breach recovery](https://21178601.fs1.hubspotusercontent-na1.net/hub/21178601/hubfs/Imported_Blog_Media/IT-staff-computers-712-1.jpg?width=500&height=500&name=IT-staff-computers-712-1.jpg) Ponemon: Business continuity management vital for data breach recovery](https://interbitdata.com/blog/ponemon-business-continuity-management-vital-for-data-breach-recovery) [![Interbit Data, Inc.](https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Interbit%202026/Interbit%20Logos/logo-interbit-retina-svg.svg)](https://interbitdata.com/) Uptime, Downtime, Anytime! - - Keeping critical information moving securely and reliably for nearly 30 years. [Contact Us](https://interbitdata.com/contact/) [info@interbitdata.com](mailto:info@interbitdata.com) 508.647.0013 207 Union Street, 1st Floor Natick, MA 01760 - [About](https://interbitdata.com/about/team) - [Blog](https://interbitdata.com/blog/) - [Events](https://interbitdata.com/resources/events/) - [Support](https://interbitdata.com/support/) Copyright ©2026 All Rights Reserved. - [Privacy and Cookie Policy](https://interbitdata.com/privacy-cookie-policy/) - [Terms and Conditions](https://interbitdata.com/terms_conditions/) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Alex Konstantinovsky", "url" : "https://interbitdata.com/blog/author/alex-konstantinovsky" }, "dateModified" : "2026-07-28T19:43:12.450Z", "datePublished" : "2019-09-24T10:26:08.000Z", "headline" : "Campbell County Health Ransomware Attack Disrupting Patient Care - Interbit Data", "image" : [ "https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Imported_Blog_Media/ThinkstockPhotos-691203508-1-1.jpg" ], "mainEntityOfPage" : { "@id" : "https://interbitdata.com/blog/campbell-county-health-ransomware-attack-disrupting-patient-care", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Interbit%20logo%20-%20with%20Reg.png" }, "name" : "Interbit Data" } } ```