Belgian hospitals disrupted
A cyberattack disrupted online services at several Belgian hospitals, affecting patient‑facing digital channels at Hospital aan de Stroom, Hospital Oost‑Limburg and Delta Hospital. The outage highlights availability and continuity as core control objectives for healthcare organisations, not just confidentiality. (news.az)
Several Belgian hospitals did not lose beds or operating rooms this week. They lost the digital front doors patients use to book appointments and read records after a cyberattack hit Dutch software supplier ChipSoft. (aa.com.tr) The hospitals named in reports were Hospital aan de Stroom in Antwerp, Hospital Oost-Limburg, and Delta Hospital in Roeselare. Patients could not use online portals to check data or make appointments because those services were taken offline as a precaution. (news.az) The break-in was not reported at the hospitals first. Z-CERT, the Dutch emergency response team for healthcare cybersecurity, said on April 7, 2026, that ChipSoft had become the victim of a ransomware attack. (z-cert.nl) Ransomware is the kind of attack where criminals lock or disrupt computer systems and then try to force payment. In this case, hospitals were told to cut connections and shut exposed services before the damage spread further. (theregister.com) ChipSoft is not a small niche vendor. Dutch reporting said its systems are used by about 70 percent of hospitals in the Netherlands, and The Register put the figure at around 80 percent, which is why one supplier problem quickly became a cross-border healthcare outage. (dutchnews.nl, theregister.com) The software at the center of the disruption is the electronic patient record system, which is the hospital’s digital chart room, appointment desk, and message inbox rolled into one. When that vendor goes dark, hospitals can keep treating people, but patient-facing tasks start falling back to phone calls and manual work. (bleepingcomputer.com) Delta Hospital showed what that looks like on the ground. Belgian broadcaster VRT reported that patients in Roeselare, Menen, and Torhout temporarily could not book appointments online or view their medical file, while the hospital said care itself continued and the portal was working again by around 4:30 p.m. on April 8. (vrt.be) That split between “care continued” and “digital services stopped” is the whole lesson here. Hospital cyber defense is not only about keeping records secret; it is also about keeping scheduling, portals, logins, and backup workflows available when a supplier gets hit. (aa.com.tr, vrt.be) Belgium had already seen a harder version of this in January 2026, when Antwerp hospital AZ Monica shut down servers, canceled at least 70 surgeries, and transferred critical patients after another cyberattack. The April ChipSoft incident did less visible clinical damage, but it exposed the same weak point: one outage in healthcare software can ripple straight into patient care. (securityaffairs.com)
