Center Hospitalier Albertville-Moûtiers

Summary

The Center Hospitalier Albertville-Moûtiers (CHAM) suffered a ransomware attack that disrupted operations across multiple facilities, including its Albertville and Moûtiers hospital branches, an EHPAD residence, and two long-term care units. The incident rendered critical infrastructure components such as servers, software systems, and portions of the network inaccessible, severely impacting hospital services during the outage.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

The Center Hospitalier Albertville-Moûtiers (CHAM) experienced a ransomware attack beginning at 4:00 AM on Monday, December 21, 2020. The incident impacted multiple healthcare facilities under CHAM’s management, including its two main hospital branches in Albertville and Moûtiers. Additional affected sites included an EHPAD (residential care facility for elderly individuals) and two long-term care units identified as Claude Léger and Les Cordeliers. Technical disruptions rendered several critical systems nonfunctional, with specific references to compromised equipment, servers, software applications, and segments of the organization’s computer network. Operational availability remained impaired at the time of reporting, though the article did not specify whether emergency services or patient care protocols were directly disrupted by the outage.

CHAM publicly acknowledged the cyberattack through an official press release, which was subsequently reported by France Bleu, a regional news outlet. No details regarding the ransomware variant, attacker identity, or ransom demands were disclosed in the available source material. The scope of infrastructure disruption suggested widespread IT system unavailability across the targeted facilities, though the hospital did not confirm whether patient data was exfiltrated or encrypted. Media coverage highlighted the incident’s timing during a period of heightened operational strain on healthcare providers, coinciding with seasonal patient volumes and pandemic-related pressures. The article concluded by referencing a third-party cybersecurity expert’s social media alert about the incident but provided no further updates on containment efforts, recovery timelines, or forensic investigations.

Sources

Sources available to members: 1 source.