Dutch Healthcare Provider ChipSoft Hit by Ransomware Attack ChipSoft, a major healthcare IT provider serving approximately 70% of Dutch hospitals, has suffered a ransomware attack, prompting alerts from Z-Cert, the Dutch healthcare cybersecurity authority. The incident, disclosed on Tuesday, involves "possible unauthorized access," with ChipSoft unable to confirm whether patient data was accessed or exfiltrated. The company is working to mitigate the impact. ChipSoft’s systems are widely used by hospitals and general practitioners for managing patient records and operational workflows. Z-Cert has advised healthcare institutions to disconnect VPN connections to ChipSoft and monitor network traffic as a precaution. While the full scope of the attack remains unclear, concerns center on patient portals online platforms where individuals access their medical records. Multiple hospitals using ChipSoft’s systems have reported no disruptions or data breaches. Rijnstate Hospital in Arnhem, Frisus MC in Heerenveen, Antoni van Leeuwenhoek Hospital in Amsterdam, and Franciscus Hospital in Rotterdam have all stated that their patient data remains secure, with some attributing this to isolated or well-protected environments. The incident highlights ongoing cybersecurity risks in the healthcare sector, where critical infrastructure and sensitive data remain prime targets for ransomware attacks. Investigations into the breach are ongoing.

Dutch Businesses See Fewer Cyberattack Damages, But AI and US Tech Dependence Raise New Risks A recent study by ABN Amro and MWM2 reveals a decline in cyberattack-related damages among Dutch businesses in 2023, though underlying vulnerabilities persist. The survey of 777 organizations found that 60% of small and medium-sized enterprises (SMEs) experienced malware, phishing, or data breaches down from 72% the previous year. Among the self-employed, incidents fell from 57% to 48%, while large firms saw a slight drop from 79% to 76%. Only 15% of affected companies reported financial or operational harm, compared to 20% in 2022. Researchers attribute the improvement to stronger basic defenses, including better firewalls, faster threat detection, and improved password practices. However, the number of attacks themselves has not decreased, suggesting that while defenses are holding, risks remain high. The findings come amid a series of high-profile breaches in the Netherlands, including Odido’s February leak of 6.2 million customer records the largest in Dutch history as well as attacks on medical software provider Chipsoft and the town of Epe, where nearly all 32,000 residents’ data was compromised. Despite the progress, the study highlights critical gaps in preparedness: only 25% of SMEs have a cyberattack response plan, and 43% have never conducted a drill. The rise of AI-driven threats further complicates the landscape, enabling faster attacks, easier exploitation of vulnerabilities, and more convincing impersonation scams. Nearly a third of firms also express concerns about employees inadvertently leaking sensitive data through AI tools like ChatGPT and Claude, yet fewer than 10% of SMEs have policies governing their use. Another growing risk is the heavy reliance on U.S. tech giants, with nearly half of Dutch firms dependent on providers like Microsoft, Amazon, and Google. The report warns that this concentration poses business risks, including potential government data access demands or service disruptions. Political tensions have already surfaced, such as the Dutch cabinet’s decision to block the sale of DigiD operator Solvinity to U.S. firm Kyndryl on national security grounds. In response, 64% of SMEs are taking steps to reduce dependence on U.S. providers, with 17% partially shifting to European alternatives such as local cloud services or AI models compared to just 12% of large firms, which face greater challenges in transitioning. The findings underscore a shifting cybersecurity landscape where improved defenses are being tested by emerging threats and geopolitical risks.

Ransomware Attack Disrupts ChipSoft EHR Services Across Dutch and Belgian Hospitals A ransomware attack on ChipSoft, a leading provider of electronic health record (EHR) software, has caused widespread disruptions to healthcare services in the Netherlands and Belgium. The incident has forced hospitals to take critical systems offline, impacting patient care and administrative operations. While the exact timeline of the attack remains unclear, the outage underscores the growing threat of ransomware targeting healthcare infrastructure, where downtime can have life-threatening consequences. The attack highlights vulnerabilities in third-party software providers, which are increasingly targeted by cybercriminals seeking to maximize disruption across multiple organizations. No group has claimed responsibility, and details on data exfiltration or ransom demands remain undisclosed. Authorities and ChipSoft are investigating the breach, but the full extent of the impact on hospitals and patient data is still being assessed.

Ransomware Attack on ChipSoft Disrupts EHR Services Across Dutch and Belgian Hospitals On April 7, 2026, Dutch healthcare IT provider ChipSoft suffered a ransomware attack that forced the shutdown of its HiX platform and associated digital services, disrupting electronic health record (EHR) access for hospitals, healthcare providers, and patients in the Netherlands and Belgium. ChipSoft, a major supplier of EHR systems, took its website and key services including Zorgportaal, HiX Mobile, and Zorgplatform offline as a precaution. The Dutch CERT, Z-CERT, has been coordinating with the company and affected institutions to manage the fallout. While critical care services remained operational, hospitals reported logistical challenges, such as increased call volumes and the need for additional support staff. Systems are now being restored in phases, with users receiving new login credentials. At least 11 Dutch hospitals, including those in Roermond and Weert, temporarily closed patient portals, limiting access to medical records and appointments. Most facilities maintained care through manual processes. In Belgium, hospitals in Antwerp, Limburg, and Roeselare also experienced outages due to their reliance on ChipSoft’s systems. The incident underscores the high-risk nature of attacks on healthcare IT providers, which serve as centralized hubs for multiple organizations. By targeting a single vendor, threat actors can disrupt operations across numerous hospitals, leveraging the urgency of healthcare services to pressure victims into paying ransoms. The attack highlights vulnerabilities in shared infrastructure and the cross-border impact of such breaches.