CHC MontLégia

CHC MontLégia is a healthcare provider based in Liège, Belgium, operating as a hospital that delivers medical services to the local population. The organisation provides a range of clinical care, including inpatient and outpatient treatment, and supports general practitioners through a dedicated web portal for appointment scheduling and patient management. Its core function is to ensure the continuity and safety of patient care, maintaining internal systems that remain operational even when external IT connections are disrupted. The hospital serves the Liège region and surrounding communities, offering essential health services that are integral to the local healthcare network. As a Belgian healthcare institution, CHC MontLégia is subject to national health regulations and standards governing patient safety, data protection, and clinical operations.

The organisation has demonstrated resilience in the face of cyber incidents, notably experiencing a suspected intrusion in November 2022 that led to the complete isolation of its IT systems from external networks, which temporarily halted online appointment scheduling and blocked GP portal access while internal care systems continued to function. Following the attack, CHC MontLégia maintained a “red phase” status with full containment and aimed to transition to an “orange phase” after implementing security enhancements to gradually restore select external services. A separate incident reported in early November 2022 caused prolonged IT system downtime, with critical infrastructure remaining offline for several months, during which the hospital sustained emergency protocols and reduced digital capabilities. These events highlighted the organisation’s reliance on robust internal processes to preserve clinical operations despite external IT disruptions. No public evidence of data leakage or threat actor attribution emerged from either incident. The hospital’s response underscored its focus on maintaining patient care continuity while addressing cybersecurity vulnerabilities in its infrastructure.