Maryland-based Frederick Health Medical Group said it experienced a data security incident that forced it to take its systems offline to prevent the attack from spreading across its network.

Headquartered in Frederick County, Maryland, Frederick Health provides a wide range of healthcare services, including primary and specialty care, emergency services, surgical care, oncology, and more. It operates multiple facilities, including Frederick Health Hospital, outpatient clinics, and specialty centres in and around the Maryland area.

In a data security incident notice posted on its website, Frederick Health said that on January 27, it was a victim of a ransomware attack that involved threat actors infiltrating its internal network and encrypting certain systems and files. The healthcare provider immediately launched an investigation, with assistance from external cyber security experts, to determine the scope of the incident.

Also, as a precaution, the healthcare provider took its systems offline to contain the incident and notified relevant law enforcement authorities about the same.

“Our facilities remain open, and we continue to provide care for our patients using established back-up processes and other downtime procedures. Nevertheless, there are certain delays in our services at this time. Most appointments are continuing as scheduled,” reads the notice.

In a separate update, Frederick Health said that Frederick Health Village Laboratory had to be closed as a result of the ransomware attack.

“All other Frederick Health Laboratory locations and Frederick Health Medical Group offices are open. Please be aware that you may experience delays as we continue to operate under current circumstances.“In the event that your appointment cannot proceed, the office team will work with you to reschedule as soon as possible,” the healthcare provider added.

Frederick Health is yet to share details on who is responsible for the ransomware attack of how the threat actors infiltrated its internal network. Also, it’s not clear whether any sensitive personal data of patients or staff were compromised during the incident.

At the time of publishing, no known ransomware group claimed responsibility for the attack on Frederick Health.