Dutch healthcare IT firm ChipSoft suffered a ransomware attack on April 7, 2026, forcing its electronic health record platform HiX offline and disrupting patient portal access across hospitals in the Netherlands and Belgium.
The attack, which the Dutch CERT Z-CERT is coordinating with the vendor and healthcare institutions, led ChipSoft to disable access to key services including Zorgportaal, HiX Mobile, and Zorgplatform as a precaution. Systems are being restored gradually with new credentials being issued to users.
At least eleven hospitals in the Netherlands took patient portals offline after the attack, blocking access to records and appointments. Belgian hospitals including Hospital aan de Stroom in Antwerp, Hospital Oost-Limburg, and Delta Hospital in Roeselare were also affected due to their reliance on ChipSoft’s systems.
Z-CERT confirmed that no critical care services have been halted, though hospitals have faced logistical disruptions including increased call volumes and added support staff. The incident underscores the supply chain risk of EHR providers acting as centralized hubs: a single compromise can disrupt multiple healthcare organizations simultaneously across national borders.
