DAYTON, Ohio (WKRC) – A class action lawsuit has been filed against Kettering Health and other parties following a significant cyberattack that compromised personal information. Dayton-area lawyers Michael Wright and Richard Schulte announced the legal action on Monday, representing hundreds of plaintiffs affected by the breach.
The lawsuit, filed in Montgomery County, comes after a ransomware group known as Interlock infiltrated Kettering Health’s network on May 20, stealing over 700,000 files from more than 20,000 folders. The stolen data includes names, dates of birth, social security numbers, health insurance, and financial information.
Interlock, a relatively new group formed in October 2024, has already claimed responsibility for 26 attacks on American healthcare companies. The group boasted about compromising more than 730,000 patient files, according to a cybersecurity research company.
Kettering Health CEO Mike Gentry addressed employees in a letter, expressing uncertainty about the hackers’ identity but suggesting they might be based outside the country. “A relatively small subset of its data was accessed,” said Gentry. He assured that once the analysis was complete, those affected would be be notified.
The attack caused a system-wide outage at Kettering Health, impacting all 14 of its medical centers — including in Franklin, Hamilton and Middletown — and its call center.
