Campus Alert Archive
CCF Mercy

$200 in Crypto or the Building: How a Tiny Ransom Demand Locked Down a Cleveland Clinic Teaching Hospital

OHbomb threatemergency notificationmedium confidence
Confirmed HoaxDetermined to be a hoax. The institutional response is documented because it reveals how the alert system performed under a perceived real threat.

On October 14, 2025, Cleveland Clinic Mercy Hospital in Canton, Ohio entered a hard lockdown at approximately 6:48 PM EDT after a caller threatened to blow up the building unless he received $200 in crypto credit cards purchased through the website Eneba.com. Canton Police, the Cleveland Clinic Police Department, and K-9 units swept the 476-bed teaching hospital floor by floor. The lockdown lifted at approximately 9:00 PM EDT after no devices were found. A second Canton hospital received a similar threat the following day, suggesting a small-ransom extortion pattern.

Alerts
3
Response
5 min
Killed
0
Injured
0
Institution
Cleveland Clinic Mercy Hospital (Canton)
Private R1 · OH
~476 studentsMass-notification + overhead pageCleveland Clinic Alert Service (Code Yellow / Hard Lockdown)
Confirmed Timeline

Alert Sequence

3 messages in sequence

Some alert texts below are approximate reconstructions from news coverage, not confirmed verbatim transcripts. Reconstructed texts are shown in italic with a dashed border. Verified verbatim texts have a solid border and are marked accordingly.

INITIAL ALERTPA System
Approximate reconstructionReconstructed from Jordan Miller News and Cleveland 19 hard-lockdown reporting114 chars
Code Yellow, hard lockdown. Code Yellow, hard lockdown. All entrances secured. Visitors restricted. Patients only.

This text has been reconstructed from news coverage and may not reflect the exact original wording.

Reconstructed from [Jordan Miller News](https://www.jordanmiller.news/2025/10/14/bomb-threat-prompts-hard-lockdown-at-cleveland-clinic-mercy-hospital-in-canton/), which reported that the threat was received at approximately 6:48 PM EDT on October 14, 2025 and that the hospital went into 'hard lockdown' meaning visitors could not enter unless they were patients
Code Yellow is the Cleveland Clinic system's designation for an external threat such as a bomb threat; Code Silver is reserved for armed assailants inside the building
Mercy Hospital is a 476-bed Catholic-sponsored facility that became a full Cleveland Clinic member on February 1, 2021 and is a clinical training site for residents and rotating students
UPDATEEmail
Approximate reconstructionReconstructed from WHBC and Cleveland 19 hospital-statement reporting269 chars
Cleveland Clinic Alert: Mercy Hospital remains in hard lockdown while Canton Police and the Cleveland Clinic Police Department investigate a bomb threat. K-9 units are sweeping every floor. Patient care continues. Employees should shelter in place. Updates will follow.

This text has been reconstructed from news coverage and may not reflect the exact original wording.

Reconstructed from [WHBC's coverage](https://www.whbc.com/clinic-threat-leads-to-hospital-lockdown/) and Cleveland 19's hospital-statement reporting, which described K-9 sweeps of every floor
The caller specifically demanded $200 in crypto credit cards purchased through Eneba.com — an unusually low ransom for a bomb-threat extortion, hinting at an inexperienced or opportunistic actor
Patient care continued throughout the lockdown; the hospital emphasized that clinical operations were not suspended
ALL CLEAREmail+2h 12m
Approximate reconstructionReconstructed from Cleveland 19 hospital all-clear reporting249 chars
Cleveland Clinic Alert: The hard lockdown at Mercy Hospital has been lifted. K-9 sweeps found no devices. The threat has been cleared by Cleveland Clinic Police and Canton Police. Normal visitor access is being restored. Thank you for your patience.

This text has been reconstructed from news coverage and may not reflect the exact original wording.

Reconstructed from [Cleveland 19's reporting](https://www.cleveland19.com/2025/10/15/cleveland-clinics-mercy-hospital-canton-locked-down-after-threat/), which placed the all-clear at approximately 9:00 PM EDT on October 14, 2025 — roughly two hours and twelve minutes after the initial threat
A [second Canton hospital received a nearly identical threat the following day](https://www.cleveland19.com/2025/10/16/another-canton-hospital-receives-bomb-threat-prompting-lockdown/), prompting Canton Police and the FBI to investigate the threats as a possible series
The Cleveland Clinic system has experienced multiple security events at member hospitals in recent years, including the 2018 Medina hoax and the 2024 Fairview ER shooting-spillover lockdown
Context

Background

On October 14, 2025, Cleveland Clinic Mercy Hospital in Canton, Ohio was placed on a hard lockdown after a caller demanded $200 in crypto credit cards purchased through Eneba.com, threatening to blow up the building if the ransom was not paid. Hospital officials told Cleveland 19 they were notified of the threat at 6:48 PM EDT. Canton Police, the Cleveland Clinic Police Department, and K-9 units swept the 476-bed teaching hospital floor by floor. Visitors were turned away unless they were patients, and patient care continued throughout. The all-clear was issued at approximately 9:00 PM EDT after no devices were found. The next day, a second Canton hospital received a similar threat — leading WNIR to report that the threats were being investigated as a possible series by Canton Police and the FBI. Mercy is a Catholic faith-based facility founded in 1908 and became a full Cleveland Clinic member on February 1, 2021; it hosts emergency-medicine and internal-medicine residents on rotation, placing trainees from the Cleveland Clinic Lerner College of Medicine and other Northeast Ohio medical schools inside the lockdown perimeter. The small-ransom extortion pattern — only $200 in crypto credit cards — is notable both for its low ask and for its targeting of a teaching hospital where students and residents are present alongside patients.
Analysis

Key Findings

The unusually low $200 ransom demand suggests an opportunistic or inexperienced extortionist rather than a sophisticated criminal organization; the use of Eneba.com (a video-game credit-card marketplace) reinforces this read
Hard lockdown — meaning all visitors are turned away — is a common Cleveland Clinic response to bomb threats but is rare on traditional college campuses, illustrating a key operational difference between hospital and university alert systems
The day-after threat at a second Canton hospital indicates a possible series, an emerging pattern of low-cost hospital extortion threats that could expand the swatting-style attack surface beyond active-shooter hoaxes
Outcome
No explosives were found and the hospital remained open for patient care throughout the lockdown. The threat was officially cleared by the Cleveland Clinic Police Department and Canton Police by 9:00 PM EDT. A nearly identical threat at a second Canton hospital the next day led WNIR to report that the threats were [under joint local-FBI investigation](https://www.wnir.com/2025/10/17/bomb-threats-at-canton-hospitals/).
Provenance

Sources

  1. News
    Cleveland Clinic's Mercy Hospital in Canton locked down after threat (Cleveland 19)
    cleveland19.com
  2. News
    Bomb threat prompts hard lockdown at Cleveland Clinic Mercy Hospital (Jordan Miller News)
    jordanmiller.news
  3. national media
    Cleveland Clinic Mercy Hospital in Canton hit with bomb threat over demand of $200 (Yahoo News)
    yahoo.com
  4. News
    Clinic: Threat Leads to Hospital Lockdown (WHBC Canton)
    whbc.com
  5. News
    Another Canton hospital receives bomb threat (Cleveland 19)
    cleveland19.com
  6. News
    Bomb threats at Canton Hospitals (WNIR 100 FM)
    wnir.com
  7. Official
    Mercy Hospital | Cleveland Clinic
    my.clevelandclinic.org
Tags
bomb-threatransomcryptohard-lockdowncode-yellowohiocleveland-cliniclerner-college-of-medicineteaching-hospitalextortionHoax
Added May 2026Updated May 2026Via ingestion