Excerpt from HIPAA Journal Article, Published on October 21, 2025
A recent cyberattack has caused a significant network outage, disrupting operations at two hospitals in North Central Massachusetts — Heywood Hospital in Gardner and Athol Hospital in Athol. Both facilities are part of Heywood Healthcare. The attack was detected last week, triggering immediate measures to safeguard the network and patient information. As a precaution, systems were taken offline, a Code Black was declared, and the emergency department temporarily closed to incoming patients by ambulance. Ambulances were redirected to nearby hospitals due to limited system access, while radiology and laboratory services experienced service interruptions.
The cyberattack impacted critical infrastructure, including the hospitals’ internet connection, email services, and phone lines. While basic communications have been restored, some operational challenges persist. On Thursday, October 16, 2025, Heywood Healthcare confirmed that the outage resulted from a cybersecurity incident. A third – party cybersecurity firm has been engaged to support investigation and system recovery efforts.
Heywood Hospital has emphasized that patient care remains the organization’s top priority. Both hospitals, along with Heywood Medical Group, continue to provide medical services despite the ongoing technical disruptions. Leadership has committed to maintaining operations while working closely with cybersecurity experts to restore full system functionality. However, no definitive timeline has been provided for complete recovery, and the precise nature of the attack, including whether ransomware was involved, remains undisclosed.
This incident underscores the growing cyber threat landscape affecting healthcare facilities in Massachusetts and highlights the importance of proactive cybersecurity measures to protect sensitive patient data. Organizations are reminded that robust infrastructure, continuous monitoring, and rapid response protocols are critical to mitigating operational and data risks.
The ongoing investigation and recovery efforts at Heywood and Athol Hospitals illustrate the challenges healthcare providers face when responding to sophisticated cyberattacks. Maintaining continuity of care while addressing cybersecurity incidents requires coordination, transparency, and resilience across all levels of hospital operations.
To delve deeper into this topic, Visit HIPAA Journal.
