Shared Health: Ransomware attack on Health Sciences Centre affects doors, ventilation and air conditioning

Ransomware Attack Disrupts Facility Systems at Winnipeg’s Health Sciences Centre

A ransomware attack on Winnipeg’s Health Sciences Centre (HSC) Manitoba’s largest hospital has disrupted non-clinical systems, including door access, heating, ventilation, and air conditioning (HVAC). Shared Health, the provincial health authority, confirmed the incident in a statement on Monday, clarifying that patient care and clinical operations remain unaffected. The organization is urging individuals requiring medical attention to proceed as usual.

While the investigation is ongoing, Shared Health reported no evidence of patient data compromise or broader system impacts. The health authority has engaged external experts to assist in resolving the issue and has notified the provincial government. In response to the attack, HSC has increased security personnel at hospital entrances to mitigate risks posed by compromised door controls.

The incident raises concerns among staff, particularly given the hospital’s history of violent incidents. Darlene Jackson, president of the Manitoba Nurses Union, highlighted the risks of unsecured entrances, noting that previous security measures had restricted access to monitored doors.

This attack follows a 2022 warning from Manitoba’s auditor general, Tyson Shtykalo, who identified gaps in Shared Health’s cybersecurity preparedness. The auditor recommended annual testing and enhanced training to improve incident response, cautioning that delays in addressing cyber threats could pose significant risks. Health Minister Uzoma Asagwara acknowledged the swift action of hospital staff in safeguarding patients and personnel during the disruption.

Source: https://www.cbc.ca/news/canada/manitoba/health-sciences-centre-ransomware-hack-9.7302058

Shared Health-Soins Communs cybersecurity rating report: https://www.rankiteo.com/company/shared-health-soins-communs

"id": "SHA1788978632",
"linkid": "shared-health-soins-communs",
"type": "Ransomware",
"date": "8/2026",
"severity": "100",
"impact": "7",
"explanation": "Attack that could injure or kill people"

{'affected_entities': [{'industry': 'Healthcare',
                        'location': 'Winnipeg, Manitoba, Canada',
                        'name': 'Health Sciences Centre (HSC)',
                        'size': 'Largest hospital in Manitoba',
                        'type': 'Hospital'}],
 'customer_advisories': 'Urging individuals requiring medical attention to '
                        'proceed as usual',
 'data_breach': {'data_exfiltration': 'No evidence of data exfiltration',
                 'personally_identifiable_information': 'No evidence of '
                                                        'patient data '
                                                        'compromise'},
 'description': 'A ransomware attack on Winnipeg’s Health Sciences Centre '
                '(HSC), Manitoba’s largest hospital, has disrupted '
                'non-clinical systems, including door access, heating, '
                'ventilation, and air conditioning (HVAC). Shared Health '
                'confirmed the incident, clarifying that patient care and '
                'clinical operations remain unaffected. The organization is '
                'urging individuals requiring medical attention to proceed as '
                'usual.',
 'impact': {'data_compromised': 'No evidence of patient data compromise',
            'operational_impact': 'Disrupted non-clinical systems; increased '
                                  'security personnel at entrances',
            'systems_affected': ['door access',
                                 'heating',
                                 'ventilation',
                                 'air conditioning (HVAC)']},
 'investigation_status': 'Ongoing',
 'lessons_learned': 'Gaps in cybersecurity preparedness identified in 2022 '
                    'audit; need for annual testing and enhanced training',
 'post_incident_analysis': {'root_causes': 'Gaps in cybersecurity preparedness '
                                           '(identified in 2022 audit)'},
 'ransomware': {'data_exfiltration': 'No evidence of data exfiltration'},
 'recommendations': 'Improve incident response through annual testing and '
                    'enhanced training',
 'references': [{'source': 'Shared Health statement'},
                {'source': 'Manitoba Nurses Union'},
                {'source': 'Manitoba’s auditor general report (2022)'}],
 'regulatory_compliance': {'regulatory_notifications': 'Provincial government '
                                                       'notified'},
 'response': {'communication_strategy': 'Urging individuals requiring medical '
                                        'attention to proceed as usual; public '
                                        'statement issued',
              'containment_measures': 'Increased security personnel at '
                                      'hospital entrances',
              'third_party_assistance': 'External experts engaged'},
 'stakeholder_advisories': 'Health Minister acknowledged swift action of '
                           'hospital staff in safeguarding patients and '
                           'personnel',
 'title': 'Ransomware Attack Disrupts Facility Systems at Winnipeg’s Health '
          'Sciences Centre',
 'type': 'Ransomware'}