Fenway Health systems remain offline, cause unconfirmed

Overview

Updated Sep 13

Fenway Health's computer systems went dark on Friday. By Sunday, patients still couldn't refill prescriptions, at least one clinic was cancelled, and in-person appointments were being shifted to virtual.

The cause is unconfirmed, but one patient openly wondered whether it matched a recent incident in Springfield and joked about Iranian hackers. Fenway Health is one of Boston's largest LGBTQIA+ providers, serving thousands who depend on it for HIV treatment, PrEP, and other ongoing care.

Why it matters

A multi-day outage at Boston's biggest LGBTQIA+ health provider disrupts HIV care and prescriptions, and may signal another healthcare cyberattack.

Last Monday's email for Boston, MA

Sent Nov 2. It carried:

Potbelly closes Downtown Crossing shop at 263 Washington Street The Potbelly at 263 Washington Street served its last sandwiches on October 25, 2026. By November 1, the shop's...
Boston records detail third-floor test kitchen and coffee bar license at Schrafft's Center The Schrafft Center in Charlestown already lists a coffee bar among its tenant amenities, open 7 a.m. to 2 p.m. On...
Zino's2Go receives Boston food establishment license for 140 Norfolk Boston licensing records show Zino's2Go received a food establishment license for 140 Norfolk on October 7, 2026. A...
Wahlburgers closes Fenway location as Massachusetts footprint shrinks Wahlburgers closed its Fenway restaurant at 132 Brookline Ave. on Oct. 31, ending an 11-year run there. The shutdown...

Get next Monday's: one short email a week. Free. Unsubscribe in one click.

Questions about this story

Free account needed to ask — your question is kept and asked for you right after sign-up. Answers are public.

No questions yet — be the first to ask.

Key Indicators

Days systems offline as of Sept 13

Computer systems went down Friday and remained down through Sunday.

In-person clinics cancelled

At least one clinic was cancelled because of the outage.

$11M

Average cost of a healthcare data breach

IBM's 2023 report found healthcare breaches cost $11 million on average, the most of any industry.

Voices

Curated perspectives — historical figures and your fellow readers.

People Involved

Ryan Dunn

Spokesman, Fenway Health

Publicly confirming the IT outage and recovery effort

Drew Starr

Fenway Health patient

Among the first to publicly report the outage

Errol Weiss

Chief Security Officer, Health ISAC

Tracking elevated cyber threats against healthcare

Organizations Involved

Fenway Health

Nonprofit community health center

Managing an IT outage affecting patient care

Boston's largest LGBTQIA+ healthcare provider, offering medical, behavioral, dental, and pharmacy services.

Health ISAC

Cyber threat intelligence sharing nonprofit

Monitoring elevated threats against healthcare

Shares cyber threat intelligence among healthcare organizations and government agencies.

Timeline

2 events Latest: September 13th, 2026 · 2 months ago

September 2026
Outage continues; outside experts engaged
Latest Update

Systems remain offline for a third day. Spokesman Ryan Dunn confirms an IT interruption and says external experts are working toward restoration; at least one clinic was cancelled. Cause and ETA undisclosed.
September 13th, 2026
Fenway Health computer systems go offline
Incident

Systems went down, forcing appointments to virtual and disrupting prescription refills. Patient Drew Starr publicly flags the outage and speculates about a cyberattack.
September 11th, 2026

Scenarios

Cyberattack confirmed, patient data stolen

Possible Resolves by Nov 15, 2026

Discussed by: Drew Starr (patient speculation) and Errol Weiss of Health ISAC, who warns of sustained attacks on healthcare

Outside forensic experts and federal agencies conclude the outage was a ransomware or data-theft attack. Fenway notifies patients, the Massachusetts attorney general, and the Department of Health and Human Services. Systems may take weeks to restore, extending care disruptions.

Technical failure identified, systems restored

Deadline passed (Oct 15, 2026)

Discussed by: Fenway Health, which has described an 'interruption to IT systems' without accusing attackers

Experts trace the outage to a hardware, software, or network failure rather than an attack. Systems return over the coming days to weeks, and Fenway announces normal operations without mentioning a breach.

Systems restored, cause never fully disclosed

Possible Resolves by End of 2026

Discussed by: Health ISAC's Errol Weiss, who notes many healthcare incidents go undisclosed

Fenway restores systems but never publicly pins the outage on a specific cause, or law enforcement keeps details sealed. Care returns to normal while the incident fades from public view.

Historical Context

3 moments from history that rhyme with this story — and how they unfolded.

February 2024

Change Healthcare ransomware (2024)

The ALPHV/BlackCat ransomware group breached Change Healthcare, UnitedHealth's billing and claims processing arm that handled roughly 15 billion transactions a year. The outage froze prescriptions and payments at thousands of pharmacies nationwide for weeks.

Then

Prescription processing was down for over a week at many pharmacies; UnitedHealth paid a $22 million ransom.

Now

The breach exposed data on a large share of American patients and triggered federal scrutiny of healthcare cybersecurity.

Why this matters now

Shows how one healthcare IT outage can freeze prescriptions for days, the same problem Fenway patients now face.

August 2023

Prospect Medical Holdings ransomware (2023)

Ransomware hit Prospect Medical Holdings, taking down systems at 16 hospitals and dozens of clinics across six states. Some emergency rooms closed and ambulances were diverted.

Then

Critical systems stayed offline more than two weeks; staff reverted to paper records and manual monitoring.

Now

Set a benchmark that healthcare recovery from ransomware routinely takes weeks, not days.

Why this matters now

Illustrates that Fenway's restoration timeline could stretch well beyond days if this turns out to be ransomware.

May 2017