Wayne Memorial Hospital, located in Georgia, experienced a major data breach affecting 163,440 individuals. On June 3, 2024, the hospital discovered a ransomware event had occurred. Cybercriminals gained access to the WMH network, encrypted data and left a ransom note.
An investigation determined that the unauthorized actors accessed the Wayne Memorial Hospital network between May 30, 2024 and June 3, 2024. Compromised information included name, date of birth, Social Security number, driver’s license number, state identification number, user identification and password, financial account number, credit or debit card number, credit card expiration date or CVV code, Medicare or Medicaid number, health insurance member number, healthcare provider number, diagnoses, medical history, treatment information, prescription information and lab test results or images.
The hospital began notifying affected patients by mail on Aug. 27, 2025. The data breach was disclosed to the Maine, New Hampshire, Massachusetts and Vermont Attorney Generals' offices on Sept. 7 and Sept. 8, 2025. WHM also posted a data incident notice on its website on Aug. 2, 2024, and published a public notice about the cybersecurity incident in the Press Sentinel in Jesup, Georgia.
In response to the ransomware attack, Wayne Memorial Hospital disconnected access to its network, took certain systems offline and worked to restore operations from backups. In addition to state and federal disclosures, the hospital is offering affected individuals 12 free months of TransUnion Cyberscout single-bureau credit monitoring services.
If you receive notification from Wayne Memorial Hospital about this breach, you may want to:
More information about the hospital can be found at the Wayne Memorial Hospital website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.