Windsor Regional
Incident posture
Linked entities
- Victim
- Windsor Regional
- Threat actors
- 0 actors
- Sources
- 1 source
Timeline
Summary
The IT provider TransForm announced that a cyberattack disrupted its services, causing online systems such as patient records and email to go offline at several southwestern Ontario hospitals, including Windsor Regional Hospital. Appointments were postponed as the organization investigated the cause and scope of the incident, including whether any patient information had been accessed. TransForm stated that it would provide updates while working to restore normal operations.
Motives
Detailed motive labels are available to members.
TTPs
Detailed technique labels are available to members.
Description
On Monday morning, staff at Windsor Regional Hospital and four other southwestern Ontario hospitals noticed abnormal performance activity in their IT systems, prompting TransForm, the shared IT provider, to take all systems offline as a precautionary measure. The outage affected online services such as patient records and email, leaving hospitals unable to access digital patient information or communicate via internal email channels. TransForm later confirmed that the disruption was the result of a cyberattack targeting its member hospitals, which include Windsor Regional Hospital, Erie Shores HealthCare, Hôtel‑Dieu Grace Healthcare, Bluewater Health and the Chatham‑Kent Health Alliance, and noted that Windsor‑Essex Hospice was also impacted by the service outage. The organization began investigating the cause and scope of the incident, including whether any patient data had been compromised, while stating that patient care was not affected by the outage at that time.
As a result of the systems being down, hospitals announced that patient appointments scheduled for the coming days would need to be rescheduled, and they issued a joint statement indicating they might not be able to reach all patients directly beforehand and could have to reschedule appointments in person. The statement urged individuals who did not require emergency care to visit their primary care provider or local clinic to lessen the strain on hospital resources while the IT issues were being addressed. Windsor Regional Hospital specifically advised callers to use the phone number 519‑254‑5577 for assistance, noting that staff would direct calls as best they could and asking for patience due to potential additional delays. All involved hospitals declared they would not provide further comment on the matter.
TransForm’s director of stakeholder relations, Michelle Watters, told CBC News that the organization would not be offering additional commentary on the attack but emphasized that updates would be provided as the investigation progressed. The IT provider said it would continue to examine the incident’s origin and extent, including any possible impact on patient information, and would share further details when available. Hospitals reiterated their request for the public to remain patient and expect delays while they worked to restore normal operations and focus on delivering care to those needing hospital services. The situation remained unresolved at the time of reporting, with no clear timeline for when the affected systems would be fully restored.
Sources
Sources available to members: 1 source.