Cyberattack on ChipSoft Prompts 11 Hospitals to Take Portals Offline
Summary
Eleven hospitals reportedly took portals offline as a precaution after an attack on ChipSoft. Ransomware was reported but not confirmed by the company, which says patient data may have been accessed or stolen.
Key points
- NOS reported that 11 hospitals took their portals offline as a precaution after the attack.
- Z-Cert advised healthcare institutions to disconnect their VPN connections to ChipSoft.
- The Volkskrant and NOS reported that a confidential Z-Cert message described a ransomware hack; ChipSoft neither confirmed nor denied ransomware.
- ChipSoft said it could not rule out patient data being viewed or stolen and referred to possible unauthorized access.
- ChipSoft supplies electronic patient-record software to about three-quarters of Dutch hospitals, and millions of patients' records are held in its HiX system.
Article Details
- Victim Organization
- ChipSoft
- Incident Type
- Cyberattack; ransomware was reported but not confirmed by ChipSoft.
- Data Types Exposed
- Patients' personal data may have been viewed or stolen; this was not confirmed.
- Affected Records
- Unknown. HiX holds patient data for millions of people, but the number affected by this incident was not disclosed.
- Operational Impact
- Eleven hospitals took their portals offline as a precaution. ChipSoft's website was reported offline the previous day.
- Ransom Or Extortion
- A substantial ransom demand was expected, but no demand was reported. Ransomware was reported in a confidential Z-Cert message cited by Volkskrant and NOS; ChipSoft neither confirmed nor denied it.
- Claim Status
- alleged