Ransomware attack on company that manages Dutch hospitals' patient files

Healthcare provider ChipSoft, which provides healthcare systems to about 70 percent of Dutch hospitals, has been hit by a ransomware attack. Z-Cert, the center of expertise for digital security in healthcare, alerted healthcare institutions to the cyberattack in a confidential message on Tuesday, NOS reported. Various hospitals have told ANP that they are either unaffected by the cyber attack or that their patient data is safe.

ChipSoft confirmed to NOS that there has been a “data incident” involving “possible unauthorized access,” and cannot rule out that patient data has been accessed or stolen. The Dutch company is taking all measures to “limit the adverse consequences as much as possible.”

ChipSoft supplies systems to hospitals and house doctors for processing patient information and streamlining processes within the hospital or practice. Z-Cert has advised healthcare institutions to disconnect their VPN connection to Chipsoft and monitor their network traffic in the coming period.

The extent of this cyberattack is not yet known. According to NOS, multiple hospitals and GP practices may be affected. A major concern is the patient portals - the connection between patient records and the internet, where patients can view their own data.

Various Dutch hospitals that use ChipSoft systems told ANP that they are monitoring the developments at ChipSoft and assured the news wire that they are either unaffected by the cyber attack or that their patient data is safe.

“Our patient data and other information systems have been secured,” a spokesperson of the Rijnstate Hospital in Arnhem said. “At this moment, we are experiencing no disruptions to our systems.”

Frisus MC said that patient data was safe. “Our hospital in Heerenveen uses ChipSoft’s electronic patient record, but has not been affected by this incident. Your data is safe.” The Leeuwarden branch uses a different system.

Antoni van Leeuwenhoek Hospital in Amsterdam said that it seems to be unaffected. “At this moment, we are experiencing no disruptions in our systems, and care for our patients continues as usual.”

The Franciscus Hospital in Rotterdam also says it is unaffected. “The ChipSoft software we use runs in a closed and well-secured environment,” the hospital said. “Your data is safe.”