Cistec

Profile narrative

Cistec, also known by its alias Cistec, is a Swiss software provider that develops the Kisim clinical information system, which is deployed in hospital environments to support clinical workflows and patient management. The company focuses on delivering software solutions tailored to the healthcare sector, specifically targeting hospitals that require integrated clinical information systems. Its core product, Kisim, is designed to facilitate the exchange of clinical data within hospital settings while adhering to relevant data protection standards. Cistec operates from its headquarters in Switzerland, serving customers primarily within the Swiss healthcare market, though the system may be used in other regions where hospitals adopt its technology. The organisation’s business model centres on providing software licences, implementation services, and ongoing support for its clinical information platform.

Cistec distinguishes itself through a specialised focus on clinical information systems for hospitals and a stated policy of not storing patient data from customer systems on its own infrastructure, which reduces the risk of patient data exposure in the event of a security breach. The company’s regulatory engagement is evident from its proactive notification of the Zurich Cantonal Police cybercrime division, the Federal Data Protection Commissioner (Edöb), and the Government Computer Emergency Response Team (GovCert) following a ransomware attack on its internal networks in February 2025. During that incident, Cistec shut down all systems to contain the threat, enlisted external cybersecurity specialists, and confirmed that no customer systems, including the Kisim platform, were affected. Analyses by the specialists and GovCert determined that the attack was limited to Cistec’s internal IT environment, prompting the organisation to rebuild its systems in a new, secure IT environment and restore services in stages. These actions underscore Cistec’s emphasis on security incident response, coordination with authorities, and commitment to maintaining the integrity of its clinical information offering.

Incidents

1 incident linked to this organisation.