Bluewater Health

Summary

A cyberattack on the IT provider TransForm disrupted online services including patient records and email at five southwestern Ontario hospitals, among them Bluewater Health. The outage led to postponed appointments and prompted the hospitals to contact patients to reschedule care while TransForm investigated whether any patient information had been compromised. Hospital officials asked non‑emergency patients to seek care elsewhere to reduce strain while the investigation continued.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On Monday morning, online services including patient records and email were reported as down at five southwestern Ontario hospitals following a cyberattack, according to the hospitals' IT provider TransForm. TransForm said it had detected abnormal performance activity on some of its systems and, in an abundance of caution, taken all systems offline. Later that Monday afternoon, TransForm issued a statement indicating that its member hospitals, as well as Windsor‑Essex Hospice, were experiencing a service outage. In a news release Monday evening, TransForm confirmed that its member hospitals were undergoing a cyberattack and noted that the incident was impacting the hospitals' provision of care in various ways. The release stated that patients with scheduled care appointments in the coming days would be contacted by their hospital to reschedule or make alternate arrangements. TransForm also said it was investigating the cause and scope of the incident, including whether any patient information had been affected.

All of the impacted hospitals issued a joint statement Monday night explaining that they might not be able to reach all patients ahead of time and might need to reschedule appointments in person. The joint statement urged individuals who did not require emergency care to visit their primary care provider or local clinic to lessen the impact on the hospitals while they addressed the issue and focused on those needing hospital care. The hospitals said they would not be providing further comment on the matter. TransForm’s director of stakeholder relations, Michelle Watters, told CBC News that the organization would not be offering additional comment. Watters had previously said that patient care was not affected by the outage, although later statements acknowledged impacts on care provision. Windsor Regional Hospital specifically noted that its email system was offline and provided a phone number, 519‑254‑5577, for callers to reach the hospital, adding that calls would be directed as best as possible and that additional delays might occur. Watters advised people attending the hospital to be patient and expect delays.

TransForm is a local non‑profit organization founded by Windsor Regional Hospital, Erie Shores HealthCare, Hôtel‑Dieu Grace Healthcare, Bluewater Health and the Chatham‑Kent Health Alliance to manage IT, supply chain and accounts for its members. The earlier Monday afternoon statement from TransForm had indicated that the service outage affected its member hospitals and Windsor‑Essex Hospice. Watters had explained that the decision to shut down systems was made after observing abnormal performance activity as a precautionary measure. The article noted that it remained unclear when the systems would be restored, but TransForm said it would provide updates as necessary and that its investigation was ongoing. No further details about the attacker, the specific malware used, or the exact timeline for restoration were provided in the source material.

Sources

Sources available to members: 1 source.