Chatham-Kent Health Alliance
Incident posture
Linked entities
- Victim
- Chatham-Kent Health Alliance
- Threat actors
- 0 actors
- Sources
- 1 source
Timeline
Summary
TransForm, the IT provider for a group of southwestern Ontario hospitals, reported a cyberattack that disrupted online services such as patient records and email at five facilities, including Chatham‑Kent Health Alliance. The outage prompted hospitals to contact patients to reschedule appointments and led to a joint statement asking non‑emergency visitors to seek care elsewhere. TransForm said it is investigating the cause and scope of the incident, including whether any patient information was compromised, while noting that patient care was not directly affected by the service disruption.
Motives
Detailed motive labels are available to members.
TTPs
Detailed technique labels are available to members.
Description
On Monday morning, TransForm, the IT provider for several southwestern Ontario hospitals, detected abnormal performance activity across its networks and, as a precaution, took all systems offline. This action resulted in the loss of online services such as patient records and email at five hospitals, including the Chatham‑Kent Health Alliance, Windsor Regional Hospital, Erie Shores HealthCare, Hôtel‑Dieu Grace Healthcare, and Bluewater Health, as well as Windsor‑Essex Hospice. Later that afternoon, TransForm issued a statement confirming that its member hospitals were experiencing a service outage that affected IT, supply chain and accounts functions. By Monday evening, TransForm released a news release stating that it had determined the outage was due to a cyberattack and that it was investigating the cause and scope of the incident, including whether any patient information had been compromised. The organization noted that the incident was impacting the hospitals’ provision of care in various ways and that patients with scheduled care appointments in the coming days would be contacted by their respective hospitals to reschedule or make alternate arrangements.
The hospitals issued a joint statement on Monday night acknowledging that they might not be able to reach all patients ahead of time and might need to reschedule appointments in person. They urged individuals who did not require emergency care to seek treatment from primary care providers or local clinics to reduce pressure on the hospitals while the IT issues were addressed. Windsor Regional Hospital specifically advised that its email system was offline and provided a phone number, 519‑254‑5577, for patients to call, noting that calls would be directed as best as possible and that additional delays could be expected. TransForm’s director of stakeholder relations, Michelle Watters, told CBC News earlier that patient care was not affected by the outage, but the later statement acknowledged that the cyberattack was impacting care provision. Throughout the incident, the hospitals indicated they would not be providing further comment on the matter.
TransForm said it would continue to provide updates as necessary and that its investigation into the cyberattack remained ongoing, with no clear timeline for when systems would be restored. The organization emphasized that it was working to determine the full extent of the incident and would share information as it became available. All affected entities maintained a stance of requesting public patience and cooperation while they focused on resolving the technical disruption and maintaining essential hospital services for those in need of urgent care. The situation remained under active review, with further developments pending the conclusion of the investigative process.
Sources
Sources available to members: 1 source.