Centre Hospitalier Universitaire de La Réunion

The Centre Hospitalier Universitaire de La Réunion (CHU de La Réunion) is a public university hospital located in France, serving as a principal healthcare institution for the island of Réunion. It provides comprehensive medical care, encompassing emergency services, specialized treatments, and surgical interventions across multiple disciplines. As a university hospital, it integrates clinical practice with medical education and research, training healthcare professionals and contributing to medical advancements. Its scope includes both inpatient and outpatient services, addressing the full spectrum of community health needs. The facility operates as a key component of France's public health system, adhering to national standards and regulations. It functions under the oversight of the regional health agency (Agence Régionale de Santé) and the French Ministry of Health, which coordinate its strategic direction and funding. The hospital's mission extends beyond direct patient care to include public health responsibilities and participation in national health initiatives. Its infrastructure supports a wide range of diagnostic and therapeutic activities, leveraging medical technologies and multidisciplinary teams. The CHU de La Réunion's role is critical in ensuring healthcare accessibility for the island's population, particularly for complex cases requiring tertiary care. It maintains collaborative relationships with other healthcare providers and academic institutions, reinforcing its position as a regional referral center. The institution's operational model emphasizes continuity of care, even during disruptions, as demonstrated by its incident response protocols.

In February 2023, the CHU de La Réunion experienced a significant cyberattack that was detected early, triggering immediate containment measures to protect patient data and maintain hospital operations. The response included disabling internet access across the entire organization and suspending remote application access for teleworking staff, while internal email and on-site application functionality were preserved. Critically, patient care continued without interruption, highlighting the hospital's business continuity planning. The regional health agency activated national support structures, involving the French Ministry of Health and the healthcare-specific Computer Emergency Response Team (CERT-Santé), to assist in assessing the incident and providing technical expertise. Ongoing technical analyses were conducted to evaluate potential impacts and define further countermeasures, ensuring that critical hospital services remained intact throughout the incident. This event underscored the hospital's integration within France's national cybersecurity framework for healthcare, which includes coordinated response mechanisms between regional agencies and central authorities. The incident also revealed the institution's reliance on interconnected IT systems for both clinical and administrative functions, a common characteristic of modern university hospitals. The successful containment without disruption to patient care demonstrated established emergency procedures. The CHU de La Réunion's handling of the attack reflects the broader challenges faced by healthcare organizations globally in balancing digital transformation with robust cyber defenses. Its experience provides a case study in incident management within a publicly funded, academically affiliated hospital setting. The hospital's continued operation during the cyber incident affirms its resilience and adherence to regulatory requirements for essential service providers.