Hôtel-Dieu Grace Healthcare
Incident posture
Linked entities
- Victim
- Hôtel-Dieu Grace Healthcare
- Threat actors
- 0 actors
- Sources
- 1 source
Timeline
Summary
A cyberattack disrupted IT services at five southwestern Ontario hospitals, including Hôtel-Dieu Grace Healthcare, causing patient records and email systems to go offline and prompting the rescheduling of scheduled care appointments. The hospitals' IT provider, TransForm, confirmed the outage and said it is investigating the cause and scope of the incident, including whether any patient information was accessed, and the facilities asked patients to use primary care providers or local clinics for non‑emergency needs while they work to restore services.
Motives
Detailed motive labels are available to members.
TTPs
Detailed technique labels are available to members.
Description
On Monday morning, online services including patient records and email went offline at five southwestern Ontario hospitals after their shared IT provider, TransForm, detected abnormal performance activity across its systems. In an abundance of caution, TransForm took all of its systems down and later determined that the outage was the result of a cyberattack affecting its member hospitals—Windsor Regional Hospital, Erie Shores HealthCare, Hôtel-Dieu Grace Healthcare, Bluewater Health, and the Chatham‑Kent Health Alliance—as well as the Windsor‑Essex Hospice. TransForm’s director of stakeholder relations, Michelle Watters, told CBC News that the organization would not be providing further comment on the matter. The hospitals issued a joint statement that evening acknowledging that the incident was impacting their provision of care in various ways.
Patients with scheduled appointments in the coming days were notified by their respective hospitals to reschedule or make alternate arrangements, and the joint statement warned that the hospitals might not be able to reach all patients directly ahead of time, potentially requiring in‑person rescheduling. The statement urged individuals who did not need emergency care to seek treatment at primary care providers or local clinics to reduce pressure on the hospitals while they worked to restore services. Windsor Regional Hospital specifically advised callers to use the phone number 519‑254‑5577 for assistance, noting that email was unavailable and that additional delays could be expected. TransForm indicated that it was investigating the cause and scope of the incident, including whether any patient information had been compromised, and promised to provide updates as necessary.
Throughout the outage, TransForm and the hospitals emphasized that patient care was not affected by the service disruption, urging the public to remain patient and expect delays while systems remained offline. The provider stated that its investigation was ongoing and that it would share further information when available. No details about the attackers, their methods, or a timeline for system restoration were disclosed in the reported statements. The hospitals reiterated that they would not be offering additional commentary on the cyberattack as the situation continued to be addressed.
Sources
Sources available to members: 1 source.