







Wayne Memorial Hospital, located in Georgia, experienced a major data breach affecting 163,440 individuals. On June 3, 2024, the hospital discovered a ransomware event had occurred. Cybercriminals gained access to the WMH network, encrypted data and left a ransom note.
An investigation determined that the unauthorized actors accessed the Wayne Memorial Hospital network between May 30, 2024 and June 3, 2024. Compromised information included name, date of birth, Social Security number, driver’s license number, state identification number, user identification and password, financial account number, credit or debit card number, credit card expiration date or CVV code, Medicare or Medicaid number, health insurance member number, healthcare provider number, diagnoses, medical history, treatment information, prescription information and lab test results or images.
The hospital began notifying affected patients by mail on Aug. 27, 2025. The data breach was disclosed to the Maine, New Hampshire, Texas, Massachusetts, Montana and Vermont Attorney Generals' offices on Sept. 7 and Sept. 8, 2025. WHM also posted a data incident notice on its website on Aug. 2, 2024, and published a public notice about the cybersecurity incident in the Press Sentinel in Jesup, Georgia.
In response to the ransomware attack, Wayne Memorial Hospital disconnected access to its network, took certain systems offline and worked to restore operations from backups. In addition to state and federal disclosures, the hospital is offering affected individuals 12 free months of TransUnion Cyberscout single-bureau credit monitoring services.
If you receive notification from Wayne Memorial Hospital about this breach, you may want to:
More information about the hospital can be found at the Wayne Memorial Hospital website.

.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)