Ransomware attack disrupts Dutch healthcare software vendor ChipSoft
Summary
Z-CERT confirmed a ransomware attack on Dutch healthcare software vendor ChipSoft, whose website and some services went offline. Most hospitals retained patient portals, while 11 took ChipSoft systems offline; the attacker is unknown.
Key points
- Z-CERT confirmed it was notified on April 7, 2026, that ChipSoft had suffered a ransomware attack; the responsible group is unknown.
- ChipSoft supplies patient-record software to about 80% of hospitals in the Netherlands.
- Most hospitals continued using patient portals, but 11 facilities took ChipSoft systems offline; nine were heavy users, according to a NOS survey.
- Z-CERT is coordinating with ChipSoft and healthcare partners and advised customers to check for unusual traffic and report suspicious activity.
- Z-CERT cited the incident as a reminder of healthcare continuity risks and the need for disaster recovery planning.
Article Details
- Victim Organization
- ChipSoft
- Incident Type
- Ransomware attack
- Incident Date
- 2026-04-07
- Disclosure Date
- 2026-04-08
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- ChipSoft’s website and some services went down. Eleven hospitals took ChipSoft systems offline, including nine that use the software more extensively; most hospitals served by ChipSoft could still use their patient portals.
- Ransom Or Extortion
- Z-CERT confirmed a ransomware attack. No ransom demand, payment, or specific extortion activity was reported.
- Claim Status
- confirmed