Cyber Incident Victim: Center Hospitalier Albertville-Motiers
Date:
Dec 2020
Location:
France
Summary
The Center Hospitalier Albertville-Moûtiers (CHAM) suffered a ransomware attack that disrupted operations across multiple facilities, including its Albertville and Moûtiers hospital branches, an EHPAD residence, and two long-term care units. The incident rendered critical infrastructure components such as servers, software systems, and portions of the network inaccessible, severely impacting hospital services during the outage.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The Center Hospitalier Albertville-Moûtiers (CHAM) experienced a ransomware attack beginning at 4:00 AM on Monday, December 21, 2020. The incident impacted multiple healthcare facilities under CHAM’s management, including its two main hospital branches in Albertville and Moûtiers. Additional affected sites included an EHPAD (residential care facility for elderly individuals) and two long-term care units identified as Claude Léger and Les Cordeliers. Technical disruptions rendered several critical systems nonfunctional, with specific references to compromised equipment, servers, software applications, and segments of the organization’s computer network. Operational availability remained impaired at the time of reporting, though the article did not specify whether emergency services or patient care protocols were directly disrupted by the outage.
CHAM publicly acknowledged the cyberattack through an official press release, which was subsequently reported by France Bleu, a regional news outlet. No details regarding the ransomware variant, attacker identity, or ransom demands were disclosed in the available source material. The scope of infrastructure disruption suggested widespread IT system unavailability across the targeted facilities, though the hospital did not confirm whether patient data was exfiltrated or encrypted. Media coverage highlighted the incident’s timing during a period of heightened operational strain on healthcare providers, coinciding with seasonal patient volumes and pandemic-related pressures. The article concluded by referencing a third-party cybersecurity expert’s social media alert about the incident but provided no further updates on containment efforts, recovery timelines, or forensic investigations.