MalwareHealthcareHealthcareRansomwareRansom DemandedData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)CredentialsMediumContained

Wayne Memorial Hospital

bd_a18fbae130892d28 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jun 3, 2024

Filed

Aug 27, 2025

To disclose

—

Affected

13state residents only

Linked

11 filings

Confidence

66%

Full breach record for Wayne Memorial Hospital →2 incidents on file

Wayne Memorial Hospital reported a ransomware incident to the Nebraska Attorney General on September 7, 2025. Unauthorized access occurred between May 30 and June 3, 2024. The attacker encrypted data and left a ransom note. 13 Nebraska residents were affected, with data including PII, SSN, driver's license, financial account numbers, and PHI. WMH contained the breach, restored from backups, engaged forensic investigators, and mailed notification letters on August 27, 2025, offering credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

Incident timeline

undetected · 4 days

May 30, 2024

Begins

Jun 3, 2024

Discovered

Aug 27, 2025

Filed

This filing is one of 11 about the same incident.View merged incident

A leak claim by monti about this victim predates this filing by 450 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitemontibd_b9a1b20ea9c4502f2024-06-30 · +422dVerified
Leak Sitemontibd_ead7e5cf61e941172024-06-03 · +450dVerified

Regulatory filings (8) · sorted by filing gap

Maine State AGbd_4b1cd5f26ef29daa2025-09-07 · +11dVerified
Massachusetts State AGbd_8d43056b8b431a352025-09-07 · +11dVerified
Vermont State AGbd_e1539c0ea8da55742025-09-07 · +11dVerified
Montana State AGbd_fb6dd2f52bc66a392025-09-07 · +11dVerified

Show 4 more filings ↓up to 390d gap

New Hampshire State AGbd_4a3a5b5a92d6120f2025-09-08 · +12dVerified
Texas State AGbd_5c0d27e2856b33002025-09-09 · +13dVerified
Indiana State AGbd_325db4432f75dfd12025-08-02 · +25dVerified
HHS OCRbd_a42c696e8556d0362024-08-02 · +390dVerified

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Wayne Memorial Hospital
norm: wayne memorial hospital
Domain: wmh.org
Industry: Healthcarellm

Discovered: Jun 3, 2024
Breach occurred: May 30, 2024 – Jun 3, 2024
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 27, 2025
Affected individuals: 13state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)Credentials
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1119 Automated Collection
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Disconnected access to its network and took certain systems offline
Restored its network from backups
Engaged legal counsel and cybersecurity professionals
Conducted a forensic investigation
Added new intrusion detection and response tools
Reset all passwords
Made additional enhancements to WMH’s network security
Published a public notice of this event on its website
Published a media notice with the Press Sentinel
Mailed individual notification letters
Offered complimentary credit monitoring and identity theft protection services
Changes made: Added new intrusion detection and response tools
Reset all passwords
Made additional enhancements to WMH’s network security
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

HHS OCRAug 2 · first

Indiana State AG+365d

Nebraska State AG+390d · this page

Maine State AG+401d

Massachusetts State AG+401d

Vermont State AG+401d

Montana State AG+401d

New Hampshire State AG+402d

Texas State AG+403d

Pattern: first filing Aug 2 (GA), last Sep 9 (TX) — a 403-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/256d5560-f23f-4a7f-8421-a2865c1c23cf.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 27, 2025
Raw hash: c03a414334902916b573ecf8c15f1515cda106184e703fe18c09a06c7fe88128

Linked disclosures

Ransomware claims (2)

Regulatory filings (8) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityWayne Memorial Hospital

Incidentdiscovered Jun 3, 2024

Stated responseDisconnected access to its network and took certain systems offline

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov