A North Alabama hospital has gone back to paper applications and faxes to put nurses on the floor, more than a month after a cyberattack knocked the state’s licensing system offline.
The Alabama Board of Nursing’s internal system, which hospitals use to upload verification and confirm that a license is current, went down after the September 1 intrusion. North Alabama Medical Center in Florence has run onboarding through manual paperwork since.
“It did affect the Alabama Board of Nurses’ internal system, and that’s the system that we use to onboard nurses to upload verifications and license checks and things like that,” said Shane Herrmann, the hospital’s communications director.
The outage reaches past renewal paperwork. Newly graduated nurses waiting on first licenses cannot be cleared the usual way, and employers statewide that lean on the board’s database for credential checks have lost their fastest verification path.
Hospital officials said the incident was confined to the state system and did not touch North Alabama Medical Center’s own operations or patient information. The board has given no date for restoration.
For clinical leaders, this is the credentialing equivalent of a downed electronic health record: a shared dependency outside the hospital’s control that nonetheless gates staffing. A licensing outage at scale forces decisions about temporary privileges, supervised practice, and how an institution documents that it verified a nurse while its normal source of truth was dark.
The practical mitigation is boring and rarely funded. Keep a written manual onboarding path with defined sign-offs, know who can approve a provisional start, and record what evidence was used so the file survives an audit. Paperworked hires that cannot be reconstructed are a compliance problem that outlives the outage.
