Overview
- ChipSoft said hackers stole medical data in last week’s ransomware attack, and some general practices urged patients to watch for scam calls, texts, emails and app messages.
- Hospitals that use ChipSoft’s HIX365 patient portals have kept those sites offline and filed precautionary breach notices with the Dutch privacy regulator, including Albert Schweitzer, Franciscus, IJsselland, the Eye Hospital and the Beatrix hospital.
- External security teams are running deep forensic checks as hospitals reset or removed support accounts and replaced digital keys that protect traffic between ChipSoft and care providers.
- Care continues, but staff at Meander MC and Diakonessenhuis report heavy manual work to share lab results, manage check-ins and change appointments, which has meant longer calls, more letters and extra shifts.
- HIX365 routes patient-portal traffic through ChipSoft servers, which investigators say may have been readable during the breach, and the patients’ association pressed ChipSoft to give clear, prompt updates on what data was affected.