April 7, 2026 — A ransomware attack on ChipSoft, a software vendor used by roughly 80 percent of hospitals in the Netherlands, forced parts of its digital infrastructure offline and disrupted hospital operations.
What happened
The Embargo ransomware group was linked to the attack, which took ChipSoft’s public website and several patient-facing platforms — including Zorgportaal and HiX Mobile — offline. Eleven hospitals took their ChipSoft-dependent systems offline as a precaution, and the company later confirmed that medical personal data had been stolen, though it said the stolen data was subsequently destroyed.
Why it matters
The incident illustrates concentration risk in healthcare IT: a single software vendor’s compromise can simultaneously disrupt patient care across a large share of a country’s hospital system, a pattern increasingly common as healthcare consolidates around a small number of electronic health-record platforms.
Security and infrastructure impact
Hospital IT and physical-security teams should treat vendor-concentration risk as a resilience planning priority, including tested downtime procedures for core clinical software, not only for ransomware directly targeting the hospital’s own network.
Leave a Reply