MONTGOMERY, Ala. — The Alabama Board of Nursing says it is steadily bringing systems back online after a cybersecurity event that began Sept. 1 knocked out much of the agency’s digital infrastructure, and it has built a temporary paper application process to keep advanced practice nurses from stalling out while the recovery continues.
The board posted the update on its website, describing measured progress rather than a finished repair. Some systems and services have been restored since the agency’s previous update on Sept. 4, and additional systems are being returned to service in phases as they are reviewed and validated. The board cautioned that services may still be temporarily unavailable, or slower than normal, while that work continues.
The most concrete piece of the announcement is a workaround with a date and a place attached. For one week only, board staff will travel to six Alabama community colleges to collect paper applications and payments in person.
Where and When Staff Will Be
The in-person collection runs on two days the week of Sept. 21, with three sites open each day and staff available from 9 a.m. to 5 p.m. at each location.
Monday, Sept. 21:
- Calhoun Community College, Decatur
- Jefferson State Community College, Shelby-Hoover Campus
- Coastal Alabama Community College, Bay Minette
Tuesday, Sept. 22:
- Gadsden State Community College
- Shelton State Community College, Martin Campus
- Wallace Community College, Dothan
The Bay Minette site is the only one of the six in the coastal counties, which makes it the practical destination for advanced practice nurses working in Mobile, Baldwin and the surrounding region who need to file on paper rather than wait.
Applicants should understand what these sites are and are not. Nothing is processed on-site. Staff are there to receive the paperwork and the payment, which are then carried back to the board’s Montgomery office and handled there. Showing up in person shortens the front end of the process; it does not produce a same-day approval.
What the Paper Process Covers
The temporary process is narrow by design. According to the board, it covers three categories:
- Applications for initial advanced practice approval
- Reinstatements
- New collaborations
Those three categories share a common feature: each one is a gate a nurse cannot practice through until the board acts. An advanced practice nurse waiting on initial approval cannot begin working in that role. A nurse seeking reinstatement is, by definition, not currently able to practice. And a new collaboration filing is what allows a certified registered nurse practitioner or certified nurse midwife to begin working with a particular collaborating physician.
That last category is the one most likely to ripple outward into clinics and hospitals. In Alabama, a nurse practitioner’s authority to practice is tied to a collaborative arrangement with a physician, and the board’s approval of that arrangement is what makes it operative. When a nurse changes employers, adds a second practice site, or a collaborating physician retires or moves, a new collaboration has to be filed and approved. A backlog in that queue does not just inconvenience the nurse. It can hold up the day a clinic planned to start seeing patients.
Bring Certified Funds, and Bring Everything Else
The board was specific about two requirements, and both are worth reading closely before making the drive.
First, applicants must provide all required supporting documentation along with the application and the payment. A paper process assembled under emergency conditions has no convenient way to accept a missing transcript or verification later in the week. The expectation is a complete package handed over at the table.
Second, payment must be made using certified funds — a cashier’s check or a money order — or a personal check written on an Alabama bank with the applicant’s name imprinted on it. Cash is not on the list, and neither is a card.
That payment restriction is not arbitrary, and it is a fairly reliable indicator of what is still offline. Card payments require a live connection to a payment processor. Certified funds and imprinted personal checks are instruments that can be received, logged on paper and deposited later without any system talking to any other system. An agency that has fallen back to that method is, in effect, saying its electronic payment path is not something it is prepared to rely on yet.
What the Board Has Said — and What It Has Not
The board’s statement is careful about the boundary between what is known and what is still under review. It continues to work with cybersecurity professionals and state resources on an active investigation, and it said that because the investigation is ongoing, it is not yet able to draw conclusions regarding the nature or scope of the event.
That phrasing leaves open the questions most people want answered. The board has not characterized the incident as ransomware or as any other specific category of attack. It has not said whether personal data was accessed or taken. It has not offered a completion date for the recovery.
Natalie Baker, the board’s executive officer, addressed the disruption directly in a recent statement.
“The ABN recognizes the impact this disruption has had on nurses, applicants, healthcare organizations, and others who rely on our services,” Baker wrote.
“Every decision is based on our mission to safeguard and promote the health, safety and welfare of the public through licensing and approval of qualified individuals.”
The board said it will continue providing updates as “meaningful progress is made and additional information becomes available.”
Why a Licensing Board Going Dark Is a Health Care Problem
It is easy to file this under information technology and move on. The reason it belongs in a health care section instead is that a licensing board is a chokepoint.
The Alabama Board of Nursing is the state agency that licenses registered nurses and licensed practical nurses in Alabama and approves advanced practice status. It also maintains the verification records that employers check. Nothing in a hospital’s or a clinic’s own systems substitutes for that. A hospital cannot decide on its own that a nurse is licensed. A staffing agency cannot verify a credential without a source of truth to verify it against.
So when the board’s systems are unavailable, the effects show up in places that have nothing to do with computers: an onboarding start date that slips, a travel nurse contract that cannot be finalized, a nurse practitioner whose new collaborative agreement is sitting in a queue while a clinic schedule waits.
That pressure is sharper in rural and small-metro Alabama than it is in Birmingham or Huntsville. In counties where a single clinic may be the nearest primary care for a substantial area, one advanced practice nurse arriving weeks late is not an administrative footnote. It is a measurable reduction in available appointments.
The Timeline So Far
- Sept. 1 — The cybersecurity event begins, disrupting board systems and services.
- Sept. 4 — The board issues an update on the disruption.
- Sept. 17 — The board reports that some systems have been restored since the Sept. 4 update, with more being brought back in phases, and announces the paper application process.
- Sept. 21-22 — Board staff collect paper applications and payments at six community colleges.
The gap between Sept. 1 and a still-incomplete recovery in the third week of the month is itself informative. Restoring a licensing system is not simply a matter of turning servers back on. Systems have to be reviewed and validated before they are trusted with regulatory data, which is exactly the language the board used. Bringing a compromised or suspect environment back too quickly risks reintroducing whatever caused the problem, and for an agency whose entire function is the integrity of a public record, a fast restoration that cannot be trusted is worse than a slow one.
Practical Guidance for Nurses in Coastal Alabama
For advanced practice nurses in Mobile and Baldwin counties and the surrounding area, a few points follow directly from what the board has published:
- Check whether your filing is in scope. The paper process covers initial advanced practice approval, reinstatements and new collaborations. If your need falls outside those three, the in-person sites are not the route.
- Coastal Alabama Community College in Bay Minette is the regional site, open Monday, Sept. 21, from 9 a.m. to 5 p.m.
- Assemble the complete packet in advance, including all required supporting documentation.
- Obtain certified funds ahead of time. A cashier’s check or money order takes a separate trip to a bank, and that errand cannot be run at the table.
- Expect processing to happen in Montgomery, on the board’s timeline, after the paperwork is carried back.
- Watch the board’s website for updates, which is where the agency has been posting its phased restoration notices.
Employers have a role here too. A clinic or hospital expecting a new advanced practice nurse to start in the coming weeks would be well served by asking now where that filing stands, rather than discovering the answer on the intended start date.
A Broader Pattern
State licensing boards occupy an awkward position in public-sector technology. They hold sensitive personal information on thousands of professionals — identifying details, employment history, disciplinary records, payment information — and they run systems that the public and employers depend on continuously. They also tend to operate on budgets far smaller than the hospitals and health systems that rely on their output.
That combination has made boards and similar small state agencies a recurring category of target, and it is the reason the recovery pattern on display here — phased restoration, validation before reconnection, an extended period of degraded service, and an investigation that outlasts the outage itself — has become a familiar shape.
The board’s own framing acknowledges the tension. Its stated mission is to safeguard the public by licensing and approving qualified individuals, and for most of September the tool it uses to do that has been partially unavailable. The paper tables at six community colleges are an admission of that, and a workaround for it.
For now, the practical situation is straightforward, if inconvenient. The board is working. Some services are back. Some are not. And for one week, a nurse who needs a decision can hand the paperwork to a person instead of a website.