Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
LockBit claimed responsibility for a November 2023 attack on Capital Health, but the health system’s later notice does not identify the ransomware group or confirm LockBit’s claim that seven terabytes of data were involved. Capital Health says an unauthorized actor accessed certain systems and that some files were acquired and/or accessed. It also says it found no evidence that personal or protected health information was misused.
What LockBit claimed—and what Capital Health confirmed
The Record reported on January 8, 2024, that LockBit had posted Capital Health to its extortion site and threatened to leak seven terabytes of data. The gang reportedly said it took data from Regional Medical Center in Trenton and did not encrypt hospital systems “so as not to interfere with patient care.” These are claims attributed to LockBit, not findings confirmed by Capital Health. The Record’s report
In a notice updated June 24, 2025, Capital Health said an unauthorized actor accessed certain systems from November 11 through November 26, 2023. Its forensic investigation determined that certain files were acquired and/or accessed. The notice does not name LockBit, establish the seven-terabyte figure, or say that all data the gang threatened to leak was taken. Capital Health’s Notice of Data Privacy Incident
Capital Health’s wording on misuse is specific: “We have found no evidence that personal information or protected health information has been misused because of the Incident.” That statement does not mean no information was accessed; the same notice says certain files were acquired and/or accessed.
#1 Best Overall
What information may have been involved
Capital Health said files under review may have contained names, addresses, Social Security numbers, dates of birth, email addresses, telephone numbers, and potentially clinical information. “May have been involved” is the hospital’s qualification: the notice does not say every affected file—or every person’s record—contained each category.
The hospital said it reviewed affected files, identified people it reasonably believed may have been involved, and sent written notices. It also said it worked with law enforcement, including the FBI and the Cybersecurity and Infrastructure Security Agency (CISA).
How the incident affected hospital operations
During the November 2023 response, The Record reported that emergency rooms stayed open while some elective surgeries were moved to later dates. Outpatient radiology appointments, neurophysiology, and non-invasive cardiology testing were also rescheduled; the report said the hospital spent more than a week operating with “system limitations.” These were reported disruptions during the response, not evidence that the same restrictions continued afterward. The Record’s report
Capital Health’s later notice said its hospitals and clinics operated normally while it responded. The two descriptions cover different points in the response and should not be read as contradicting each other: one describes temporary scheduling changes reported in November, while the later notice summarizes the organization’s overall response.
What Capital Health says it did
Capital Health said it reset passwords and added endpoint detection and response software. The notice also describes complimentary identity monitoring, fraud consultation, and identity theft restoration services through IDX for potentially affected individuals. The notice documents an incident-specific offer but does not establish whether it remains available today.
The hospital advised people to stay alert for suspicious activity, review credit reports and account statements, consider a fraud alert or credit freeze, and update common or reused passwords. These are the steps Capital Health included in its notice; readers should refer to their individual notice for any specific eligibility or enrollment instructions. Capital Health’s Notice of Data Privacy Incident
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Capital Health breach settlement: claims are closed
The official settlement website for Bruce Graycar, et al. v. Capital Health Systems, Inc. (Civil Action No. 3:23-CV-1418-L23234-MAS-JTQ) says the settlement amount was $4.5 million. The deadline to submit a claim was April 6, 2026, and the administrator says benefits for timely and valid claims were distributed on October 2, 2026. As of October 4, 2026, the claim window is closed. Official settlement website
The settlement FAQ describes these benefits for qualifying claims:
Best Value
- Used Book in Good Condition
- Documented losses: Reimbursement of up to $5,000, subject to a timely, valid claim and supporting documentation.
- Alternative cash payment: An estimated $100, subject to the settlement terms and any applicable pro-rata adjustment; it is not a guaranteed individual payment.
- Credit monitoring: Optional three-year monitoring, valued in the FAQ at $90 per year, for qualifying timely claims.
The FAQ says the court granted final approval on July 14, 2026. It also says Capital Health denied the allegations and denied wrongdoing or liability; the settlement did not include a court determination that Capital Health had done anything wrong. Official settlement FAQ
Quick Recap
Incident timeline
- November 11–26, 2023: The period during which Capital Health says an unauthorized actor accessed certain systems.
- November 2023: The Record reported temporary operational adjustments during the response, including rescheduled procedures and testing.
- Around December 1, 2023: Capital Health says its forensic investigation determined that certain files had been acquired and/or accessed.
- January 2024: The Record reported LockBit’s claim and threat to leak seven terabytes; those details remain attributed to the gang.
- June 24, 2025: Capital Health updated its incident notice after completing its investigation.
- April 6, 2026: Deadline for settlement claims.
- July 14 and October 2, 2026: The settlement FAQ reports final approval on July 14; the settlement home page says benefits for timely and valid claims were distributed October 2.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
