Desk live·
ForensicPost
Breaches/Availability/File 24-0508

A Hundred and Forty Hospitals, and the Records Went to Paper

Ascension lost its electronic health record and its patient portal in May 2024. Ambulances were diverted, clinical staff worked on paper for weeks, and restoration took about a month.

Constructed geometry · not a chart of case data
JurisdictionUSASt. Louis, Missourithe affected organisation’s jurisdiction, not the actor’s suspected origin
TargetAscension
ActorBlack Basta
D. Kennedy13 min readConfidence: high3 sources reviewed

In May 2024 Ascension — one of the largest non-profit health systems in the United States, running around 140 hospitals — lost access to its electronic health record and its MyChart patient portal to a ransomware attack reported as Black Basta.

Some sites diverted ambulances. Clinical staff moved to paper charting and manual medication ordering. Access was restored on a rolling basis through late May and June, with full restoration targeted for 14 June.

Paper Charting Is Not The Same As No Charting

It works. Staff who trained before electronic records still know how, and departments keep downtime forms for exactly this.

What it loses is the thing the electronic record was bought for: the allergy flag that fires automatically, the interaction check, the result that appears in front of whoever needs it without being carried there. Every one of those becomes a person remembering, under load, for a month.

The Corpus Argues This Capability Is Wasting

The fallback theme holds that organisations which limit damage do so with manual procedures inherited from a pre-automation era, that nobody tracks that capability, and that every efficiency programme reduces it.

Ascension is the strongest case for it and the clearest warning about it at once. The fallback held for a month across 140 hospitals — and it held because enough staff had worked that way before, which is a resource with a retirement date.

Diversion Moves The Harm Rather Than Removing It

An ambulance diverted from one hospital arrives at another, further away, which was not resourced for it. The harm does not disappear at the point of diversion; it is distributed to patients and staff who were never part of the incident.

Nothing counts that. It produces no notification, no filing and no figure, which is the corpus’s standing complaint about availability harm and the reason 24-0604 matters as much as it does.

How we reported this

Compiled from contemporaneous reporting and company statements, listed below. Attribution to Black Basta is as reported. The clinical descriptions are the general consequences of electronic-record downtime, not findings about any individual patient or site. No count of diverted ambulances or delayed procedures has been seen by this desk. Corrections: corrections@forensicpost.com.

Sources
  1. Ascension confirms data breached in Black Basta ransomware attackHealthcare IT News
  2. Ascension ransomware attack affects 5.6 million patientsHIPAA Journal
  3. Black Basta behind ransomware attack on AscensionHCI Innovation Group
D. Kennedy
Identity and access reporter. Former DFIR consultant. Signal on request.
// the chain of custody — tuesdays

Get the next file first.

One incident a week, taken apart properly. Logs, timelines, and what the filing left out.

PGP-signed edition · no tracking pixels · one-click unsubscribe
© 2026 ForensicPost Media · the desk · newsletter · searchGlossary