Background

On Tuesday, AHA and Health-ISAC warned that user @AXactual posted on X with details regarding the active planning of a coordinated, multi-city terrorist attack aimed at U.S. hospitals.

Specifically, the post said that chatter in training camps run by ISIS-K — a division of the jihadist group Islamic State — confirmed planning is in the advanced stages of an attack that would use vehicle-borne improvised explosive devices followed by armed assaults and hostage scenarios.

The primary targets of the attack would be mid-tier cities with low-security facilities, the bulletin said. Information has claimed multiple simultaneous targets, but attackers would likely select healthcare facilities with visibly weak security and conduct prior planning coordination.

The X post was added to the account of American Kinetix, a self-described Christian company in the United States consisting of joint special operations command, the CIA, and combat veterans. American Kinetix said it received reports of potential pre-attack surveillance at hospitals.

"Generally, foreign terrorist groups do not publicize their upcoming attacks," the bulletin said. "However, this widely viewed post may encourage others to engage in malicious activity directed toward the health sector, so threats of this nature should be taken seriously."

AHA said it issued its threat bulletin "out of an abundance of caution" after it had received multiple reports from the field regarding the social media post alleging active planning of an attack.

AHA has issued an updated bulletin with the latest update from the FBI alongside its recommended security measures that hospitals should take, including evaluating coordination and physical security capabilities, cybersecurity, and emergency management plans, alongside increasing relationships with local and federal law enforcement.