Gruppo MultiMedica

Gruppo MultiMedica is an Italian healthcare organisation that provides a broad range of medical services to patients across its network of facilities. Its core offerings include outpatient consultations, emergency department care, diagnostic reporting, obstetrics, dialysis and chemotherapy treatments. The organisation serves both routine and specialised care needs, maintaining clinical pathways that support inpatient and outpatient populations. It operates under the aliases Multimedica and Gruppo MultiMedica, with its headquarters situated in Italy.

The April 2023 cyber incident specifically disrupted the organisation’s emergency rooms in Milan and Sesto San Giovanni, leading to the suspension of outpatient services, emergency room activities and the collection of medical reports. These locations indicate that Gruppo MultiMedica has an operational presence in the Lombardy region of northern Italy. While the exact number of sites, staff members or annual patient encounters is not disclosed in the available sources, the attack affected multiple service lines at once.

A distinguishing characteristic of Gruppo MultiMedica is its ability to keep critical treatments such as obstetrics, dialysis and chemotherapy running even when broader IT systems are compromised. During the successive attacks, the organisation prioritised these life‑saving services while non‑essential functions were temporarily halted. This response reflects an institutional focus on patient safety and the continuity of essential care under adverse conditions. Additionally, the organisation engaged law enforcement agencies to assist with the investigation and to strengthen its cyber‑resilience posture.

Structurally, Gruppo MultiMedica is organised as a group entity, as indicated by its official name and the use of the term “Gruppo” in its branding. The sources do not provide information about any parent company, subsidiary relationships or ownership structure. Consequently, details regarding its corporate governance or equity holdings remain unspecified beyond its group designation.

Following the incident, Gruppo MultiMedica has been collaborating with external cybersecurity experts and law enforcement to restore its IT systems and to resume normal clinical operations. The organisation has stated that it cannot determine a timeline for a full return to regular services, reflecting the complexity of the recovery process. Ongoing efforts aim to rebuild secure infrastructure while ensuring that patient care continues to be delivered safely and effectively.