Reported ChipSoft Ransomware Incident Disrupts Hospital Systems

Summary
A reported ransomware incident at Dutch software vendor ChipSoft led 11 hospitals to disconnect its systems. Z-CERT is coordinating support; no critical care stoppages or indications of patient-data leakage were reported.
Key points
- ChipSoft disabled access to Zorgportaal, HiX Mobile, and Zorgplatform while working to restore services in phases.
- Eleven hospitals reportedly disconnected ChipSoft software; a confidential advisory urged customers to cut secure VPN connections.
- Z-CERT is coordinating support, monitoring, and threat intelligence for affected institutions.
- Hospitals reported logistical challenges and expanded manual workflows, but Z-CERT said no critical care processes had stopped.
- The source of the incident remains unknown, and no ransomware group has claimed responsibility.
- LUMC postponed a planned electronic patient record rollout; the hospital said there were no indications that patient data had leaked.
Article Details
- Victim Organization
- ChipSoft
- Victim Domain
- Unknown
- Incident Type
- Ransomware incident that disrupted ChipSoft systems and prompted precautionary disconnections by hospitals.
- Operational Impact
- ChipSoft disabled connections to Zorgportaal, HiX Mobile, and Zorgplatform while restoring services. Reports say 11 hospitals disconnected ChipSoft software, and several hospitals experienced unavailable systems. Hospitals expanded manual workflows, staffing, and telephony support; no critical care processes had stopped. LUMC postponed a planned electronic patient record rollout.
- Ransom Or Extortion
- No ransomware group has claimed responsibility. The article reports no ransom demand or extortion activity.
- Claim Status
- confirmed
Vendors
Products
HiX Mobilecoordinating response and monitoring while ChipSoft works to restore platforms such as Zorgportaal and HiX Mobile, and affected hospitals have relied on contingency plans to maintain patient care #ChipSoft #HiXMobile.ZorgplatformIn response to the ransomware incident, the company disabled connections to key platforms, including Zorgportaal, HiX Mobile, and the Zorgplatform, as a precaution.ZorgportaalZ-CERT is coordinating response and monitoring while ChipSoft works to restore platforms such as Zorgportaal and HiX Mobile, and affected hospitals have relied on contingency plans to maintain patient care #ChipSoft
