Community Medical Center (Falls City) Cyberattack Investigation

In an October 19, 2026 MSC News report, CEO Ryan Larsen described attackers accessing parts of the hospital’s network over the preceding weekend, October 17–18. The report said some business files appeared to be involved and the full extent was not yet known.

MSC News reported a computer-system shutdown, a return to paper records, delayed or canceled appointments, and critical patients being taken elsewhere because diagnostic images could not be transmitted to radiologists. The emergency room remained open. The report also described plans to replace computers and deploy a new network.

These were conditions reported on October 19, not a statement of the hospital’s current service availability. Contact Community Medical Center directly for current care and appointment information.

The same report described an initial assessment that patient information appeared not to have been compromised, with outside specialists to verify that assessment and notification planned if additional problems were found. That was a preliminary assessment, not a completed forensic determination.

This page concerns Community Medical Center in Falls City, Nebraska, serving Richardson County and surrounding communities. The hospital’s official website identifies its Falls City services and patient resources. Other hospitals with similar names are outside the scope of this page.

We are examining the incident’s scope, safeguards for sensitive information, notices and assistance provided, and any related privacy harm, interruption costs, or losses. Information under review may include patient identifiers, medical or treatment information, insurance and billing records, and employee information. These are categories under investigation, not confirmed categories of exposed information.

We are also reviewing documented appointment changes, diversions, and expenses where people have information suggesting a connection to the incident. A service disruption alone does not establish a medical injury or a legal claim. Individual exposure, causation, and legal responsibility require further investigation.

Keep notices, envelopes, emails, hospital updates, appointment-change messages, billing and insurance correspondence, and records of relevant dates, expenses, losses, reports, and time spent responding. Describe documents you already have before sending them.

Do not search for, purchase, download, or share allegedly stolen patient records. Contacting us does not require checking a leak site or locating your records in an alleged dataset.

Do not send medical records, diagnoses, test results, insurance identifiers, Social Security numbers, passwords, or complete financial-account details in an initial email or website submission. If you are contacting us for a child or another patient, describe your relationship without sending their medical history.