WINNIPEG — Manitoba’s largest hospital remains in the midst of recovery efforts after a ransomware attack was discovered last week, Shared Health said on Monday.
Systems affected but patient care steady, authorities say
The health authority reported the incident to staff after identifying interference with maintenance systems at Winnipeg’s Health Sciences Centre and Cancer Care Manitoba. Shared Health emphasised that, at this stage, patient care is not affected.
Investigators found the cyber intrusion impacted central monitoring services for the hospitals’ heating, ventilation and air-conditioning systems. Shared Health said those systems continue to operate and are being overseen locally while recovery work progresses. The authority also reported impacts to the site’s security office and an inability to issue or update staff ID access cards.
Security steps and privacy review under way
Shared Health said additional protective measures were put in place at the affected location after the issue was first discovered on Aug. 10. Authorities are still probing whether any personal health or financial information was accessed. An initial review indicated no such data breach, but the investigation continues.
The health authority did not provide a timeline for full restoration of all affected systems or specify whether any services beyond those described may have been disrupted. Shared Health reiterated that frontline clinical services remain functioning and that patient safety has not been compromised.
Operational impacts in brief
| Area | Status reported by Shared Health |
|---|---|
| Maintenance systems | Affected |
| HVAC central monitoring | Affected but systems operating and locally monitored |
| Security office | Closed |
| ID access cards | Unable to issue or update |
| Patient care | Not affected (per Shared Health) |
| Personal/financial data | Under investigation; initial review suggested none accessed |
What this means for patients and staff
Although clinical services are continuing, the incident highlights vulnerabilities in non-clinical systems that support hospital operations. Disruption to central monitoring of mechanical systems can increase the reliance on local staff to monitor environmental controls and may complicate building maintenance and security procedures.
Shared Health’s notification did not list any changes to appointment schedules or specify alterations to inpatient or outpatient services. Patients with concerns about upcoming appointments should contact their clinic or Shared Health directly for the most current information.
- If you have an upcoming appointment: Check communications from your clinic or Shared Health before travelling to the hospital.
- If you are a staff member: Follow internal guidance from Shared Health and your unit manager regarding access cards and security procedures.
- For privacy concerns: Expect further updates while the investigation continues into whether personal health or financial data were accessed.
Context and broader concerns
Ransomware and other cyberattacks on health-care organisations can affect a wide range of operational systems, from electronic health records to environmental controls. Even when direct clinical systems remain operational, attacks on maintenance, security or administrative systems can impose extra burdens on staff and carry safety and privacy implications.
Shared Health’s decision to add extra security at the Winnipeg site signals a precautionary approach as investigators work to determine the extent of the intrusion. Officials have not yet disclosed whether they are coordinating with provincial or national cybersecurity agencies or law enforcement as part of the probe.
Officials have urged patience while remediation work continues and said they will provide updates as more information becomes available.
Reporting for WE NEWS — Manitoba Correspondent
