Oumiya: ransomware attack

Server disruption and encryption were identified on January 21 and disclosed February 7. The March 19 report could not rule out access to about 20,000 personal records but found no clear evidence of exfiltration. Servers had recovered, with no current operational impact or confirmed secondary harm.