Let’s answer your questions
MyChart
MyChart
MyChart access has been restored, allowing individuals to view and schedule appointments and communicate with their healthcare provider. Our phone lines and call centers are also stable and functional across the organization.
What Can I Access?
Operational Updates
Operational Updates
We have resumed normal operations for several key services. This includes hospital-based and outpatient services, such as surgery, imaging, retail pharmacy, and physician office visits. Due to our return to normal operations—we will discontinue our temporary urgent phone numbers.
View Our Operational Updates
Billing & Payment Questions
Billing & Payment Questions
There may be temporary delays in billing or payment processing, but your care will not be interrupted. Once systems are fully restored, you will receive updated information.
Read More
Incident Impact
Incident Impact
Since Tuesday, May 20, our priority has been to continue providing safe patient care while securing our systems and restoring the services our patients expect from Kettering Health. With this transition, we’ve created an FAQ to provide additional information for our community.
What Happened?Operational Updates
As we resume back to normal. Find updates about our key services.
-
Appointments and Surgeries
Our hospitals, clinics, and emergency departments are open. Please come to your scheduled appointment or surgery unless one of our clinical teams call you to reschedule.
-
ER, On-Demand Care and Urgent Care
Our Emergency Departments, On-Demand Care, and Urgent Care locations remain open and ready to care for you. All Kettering Health emergency departments are now fully operational and off diversion, which means Kettering Health is accepting both walk-in patients and those transported by first responders.
-
Need Medication Refills?
If you are a current patient, bring your empty prescription bottle to the practice location, and our team will assist you.
SCAM Alert
We’re aware of the possibility that individuals connected to our organization—employees, partners, or members of the community—may be targeted by scam communications. These may include fraudulent emails, calls, or text messages designed to intimidate, demand a response, or claim data exposure.
We urge the public to exercise caution. If you receive suspicious communications, do not respond, click links, or open attachments. Hang up immediately if contacted by phone and report suspicious messages to the police.
Commonly Asked Questions
We are answering our commonly asked questions about the incident.
On May 20, 2025, Kettering Health was impacted by a cybersecurity incident linked to a group known as Interlock. We responded immediately to secure our systems and protect patient data. Since then, we have been restoring systems and enhancing security.
Based on our investigation, we believe the incident was carried out by a ransomware group called Interlock. The matter is under investigation by cybersecurity experts and law enforcement.
Some of our systems, including phones and scheduling tools, were affected by the incident. We are restoring services in a phased and secure manner, and we understand the delays have been frustrating.
Many of our communication systems were impacted, and we’re working to return to normal operations as quickly and safely as possible. We appreciate your patience during this process.
We are actively working through a high volume of rescheduling needs. You will be contacted as soon as we are able to safely restore full scheduling capabilities. Thank you for your continued patience.
No, there is no connection between this cybersecurity event and any unrelated local or international activity.
Cybersecurity incidents like this are becoming increasingly sophisticated, even targeting large and well-protected organizations. As soon as we detected unauthorized activity, we acted immediately to contain it and began strengthening our systems further.
We took a careful, phased approach to ensure all systems were secure before bringing them back online. Restoring healthcare systems safely requires time and precision, especially to protect patient information.
We have reason to believe the incident was carried out by a ransomware group called Interlock. We responded immediately to secure our systems, and we continue to cooperate with law enforcement and cybersecurity experts.
We are not commenting on specific operational details of our response. Our focus was on securing our systems and restoring safe access to care for our patients.
We have no evidence linking this incident to any other organizations. The investigation is ongoing, and we are working closely with law enforcement.
A thorough review of all systems was conducted by external partners and our internal teams who removed all threats and secured affected systems. All necessary security protocols, including network segmentation, enhanced monitoring, and updated access controls, are in place. We are confident that our cybersecurity framework and employee security training are sufficient to mitigate future risks.
Billing & Payment Questions
There may be temporary delays in billing or payment processing, but your care will not be interrupted. Your scheduled payment plan will not be delinquent as a result of the outage.
When our systems went offline, payment plans were paused and will not fall behind or age. As part of our recovery efforts, we will reset payment plans so they resume correctly, without affecting your account status. Once systems are fully restored, you will receive updated information.
Billing Questions Answered
There may be temporary delays in billing or payment processing, but your care will not be interrupted. Once systems are fully restored, you will receive updated information.
No, your scheduled payment plan will not be delinquent as a result of the outage. When our systems went offline, payment plans were paused and will not fall behind or age. As part of our recovery efforts, we will reset payment plans so they resume correctly, without affecting your account status.
Our pricing is not determined based on isolated events. Our focus remains on delivering safe, high-quality care to our community.
We are still conducting a thorough review of the incident. At this time, we believe only a limited portion of our data was accessed. If we determine your personal or financial information was involved, you will be notified directly.
You will receive direct communication from Kettering Health if your information was impacted. That notification will include details and instructions on any next steps to be taken.
There is currently no indication that any banking information stored in Epic or MyChart was accessed. We continue to investigate, and if that changes, we will notify affected individuals directly.
If we determine your information was impacted, your notification may include resources such as identity protection or credit monitoring, as appropriate.
If you believe you were a victim of a scam, contact your financial institution immediately to report the transaction. You should also file a report with local law enforcement. Kettering Health will never call asking for payment unless it has been pre-arranged through our secure channels.
If your information was affected, you will receive a notification from Kettering Health with relevant information.
A Message from Kettering Health CEO Mike Gentry
Four days ago, Kettering Health experienced an unscheduled downtime for most of its IT applications. While planned maintenance and updates are routine and occur on an ongoing basis, fortunately an event of this type has been rare for Kettering Health. Our team members are diligently following downtime processes and procedures. Patient appointments where IT applications are a necessary part of care plans are being rescheduled. In healthcare, these events often range from 10 to 20 days in duration.
Our emergency departments, hospitals, and clinics remain open. We want to publicly express our appreciation to the network of Greater Dayton and northern Cincinnati hospitals and health systems, particularly Dayton Children’s and Premier Health as they have partnered with us to care for the community during this time. Additionally, this week, we want to specifically thank our EMS and police as this is their designated week of recognition. Starting this weekend, we’ll have daily updates.