Kettering Health Under Investigation for Data Breach of Patient Records

Schubert Jonckheer & Kolbe LLP is investigating a data breach impacting the sensitive personal and health information of patients of Kettering Health, an Ohio-based healthcare network. 

Kettering Health experienced a ransomware attack on May 20, 2025, which caused a shutdown of information technology services. Kettering Health had to cancel elective inpatient and outpatient procedures on the day the attack occurred. Kettering Health’s emergency rooms diverted patients to other medical facilities until May 28, 2025, and systems were not fully operational until June 10, 2025.

On June 4, 2025, the Interlock ransomware group claimed responsibility for the data breach, listing Kettering Health on the Dark Web. Interlock claims to have stolen 941 gigabytes of data, including 732,490 files across 20,418 folders.

Kettering Health has failed to inform its patients whether their private information was stolen by Interlock, but Interlock has posted the following information on the Dark Web: names, payroll information, personnel files, identity documents, pharmacy and blood bank documents, financial revenue reports, corporate tax and insurance information, budget reports, and patient files.

If your personal information was impacted by this incident, you may be at risk of identity theft and other serious violations of your privacy. As a result, you may be entitled to money damages and an injunction requiring changes to Kettering Health’s cybersecurity practices.

If you received notification of this data breach or are a patient of Kettering Health and wish to obtain additional information about your legal rights, please fill out the form below.