Patient medical data stolen in Chipsoft ransomware attack | #ransomware | #cybercrime

Medical software company Chipsoft has confirmed that patient data was stolen in a ransomware attack last week, after initially telling clients that personal data was “probably” safe.

The attack hit family doctors, rehabilitation clinics and the Rotterdam Eye Hospital, which all use Chipsoft’s cloud-hosted HiX 365 platform. Other hospitals that use the company’s technology on their own servers were not affected.

The hackers specifically targeted medical information about treatments but the stolen data has not yet appeared on the dark web, according to the Volkskrant. Chipsoft has not said whether it is in negotiations with the attackers, the paper reported.

Widespread data breach reports

The Dutch data protection authority has received 66 reports of a data breach in connection with the attack, including one from Chipsoft itself. The family doctors’ association LHV said dozens of practices use the company’s system, with the largest group in North Limburg.

The Dutch Patients’ Federation said on Thursday that the lack of information for patients had gone on too long. “Patients need to know where they stand, especially when it involves sensitive medical data,” the organisation said.

Chipsoft CEO Hans Mulder said the company could not undo the theft. “We are doing everything we can to support the affected customers as best as possible,” he said via social media.