WINNIPEG — A ransomware attack has disrupted door access and heating, ventilation and air-conditioning systems at the Health Sciences Centre in Winnipeg, Shared Health confirmed Monday, though the provincial health authority says patient care and clinical operations are continuing without interruption.
What officials say
Shared Health described the incident as "a ransomware incident affecting certain facility maintenance systems." The authority said it has launched an investigation to determine the nature and scope of the attack and is reviewing which systems were impacted.
"Clinical services continue uninterrupted, and based on the investigation conducted to date, there is no indication that patients have been affected,"
The statement, provided to CBC News by spokesperson Tara Seel, also noted the health authority has informed the provincial government and sought expert advice to resolve the problem.
Operational effects at the hospital
Hospital managers have taken immediate precautions as building systems remain affected. In an internal memo to staff, Health Sciences Centre said it has increased the presence of security and institutional safety officers at hospital entrances while door access remains disrupted.
Shared Health emphasised there were no reported impacts to clinical systems — such as electronic medical records or diagnostics — and encouraged anyone who needs to attend the hospital to continue doing so.
- Affected systems: door access controls; heating, ventilation and air-conditioning (HVAC) systems.
- Unaffected systems: clinical services and patient care operations, according to Shared Health.
- Measures taken: investigation launched; provincial government notified; expert advice sought; increased on-site security at entrances.
Context and previous warnings
The incident comes amid previous concerns about cybersecurity at Shared Health. Two years ago, the Manitoba auditor general warned the provincial health authority needed to strengthen its cyber defences, noting deficiencies in testing that would ensure a prompt response to an attack. The auditor recommended annual testing to assess readiness.
Shared Health did not provide a timeline for when full functionality of the affected maintenance systems would be restored, nor did it disclose whether any patient or staff data were involved. Officials also did not indicate whether a ransom demand had been made.
Implications for patients and staff
Hospital building systems such as door access and HVAC are critical to daily operations. While Shared Health says clinical services remain uninterrupted, changes to door access have immediate practical impacts: patients, visitors and staff may experience delays or revised entry routes while security officers manage entrances.
Disruptions to ventilation systems can also raise concerns in a healthcare setting, where air quality and controlled environments are important for infection prevention and for patients in sensitive units. Shared Health’s statement that there is "no indication that patients have been affected" will be closely watched by staff, patient advocates and families for confirmation as the investigation continues.
What to watch next
Officials have said they are reviewing the extent of the attack and which systems were affected. The province and Shared Health will likely be asked to provide additional details about:
| Issue | Information to expect |
|---|---|
| Scope of systems affected | Which facility systems and networks were compromised |
| Patient data | Whether any health records or personal information were accessed |
| Recovery timeline | Estimated time to restore full door and HVAC functionality |
Shared Health has not yet provided details on timelines for recovery, nor on any technical response steps being taken beyond engaging outside experts.
Community reaction
News that a major hospital’s facility systems were targeted by ransomware is likely to renew concerns among Manitobans about the resilience of critical public infrastructure. Hospitals, transit systems and other public services have increasingly been attractive targets for cybercriminals because of their essential role in daily life.
For now, Shared Health’s assurance that clinical care is continuing aims to reassure patients and families who rely on the Health Sciences Centre for complex and urgent services. Officials have urged those who need to attend the hospital to proceed as planned.
As the investigation proceeds, Manitoba’s health authority and provincial officials will face questions about whether previous audit recommendations on cybersecurity were implemented and what additional steps will be taken to prevent similar incidents in future.
Reporting from WE NEWS will follow updates from Shared Health and the province as they become available.
