{"id":"nipigon-hospital-ransomware-patient-data-sep-2026","category":"breach","status":"closed","title":"Nipigon hospital ransomware closed outpatient tests and scans; later notice confirms patient-data theft","tldr":"Ransomware disrupted Nipigon hospital’s outpatient tests and scans. A later hospital notice confirms stolen patient information. Check whether you fall within its affected groups and watch for impersonation scams.","summary":"Ransomware disrupted Nipigon District Memorial Hospital in Ontario, closing outpatient laboratory and diagnostic imaging services and forcing manual procedures and longer waits. Its 13 October notice confirms stolen files containing patient information, including health card numbers and clinical details for some groups. The electronic medical record was unaffected. However, the same document’s FAQ contradicts the theft confirmation, saying theft is unconfirmed. Patients, relatives, employees, students and volunteers are among those identified as affected. As of 3 November, the material reviewed did not establish a total affected-person count or confirm full restoration of outpatient services.","action":"Check the hospital’s notice for affected groups. Verify unexpected requests for personal information independently; send incident questions or suspected misuse reports to privacy@ndmh.ca.","product":"Nipigon District Memorial Hospital","audience":"home","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["nipigon","ransomware","healthcare","data-breach","canada"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"Important Notice Regarding Cybersecurity Incident — updated 13 October 2026","url":"https://www.ndmh.ca/upload/documents/cyber-incident-public-notification-includes-faq-updated-october-13-2026.pdf","by":"Nipigon District Memorial Hospital","date":"2026-10-13"},{"kind":"news","title":"Nipigon Hospital reports ransomware attack","url":"https://medicalbuyer.co.in/nipigon-hospital-reports-ransomware-attack/","by":"Medical Buyer","date":"2026-09-17"},{"kind":"news","title":"Cyber attack at Nipigon District Hospital","url":"https://www.canhealth.com/2026/09/23/cyber-attack-at-nipigon-district-hospital/","by":"Canadian Healthcare Technology","date":"2026-09-23"}],"started":"2026-09-14","closed":"2026-10-13","created":"2026-11-03T21:58:56.103Z","updated":"2026-11-03T21:58:56.103Z","cve_notes":[],"timeline":[{"at":"2026-10-13","added":"2026-11-03T21:54:09.841Z","kind":"vendor-revised","text":"The hospital expanded its exposure notice to include inpatients from October 2021 to September 2026 and people screened for COVID from November 2020 to October 2022. Analysis remained ongoing.","url":"https://www.ndmh.ca/upload/documents/cyber-incident-public-notification-includes-faq-updated-october-13-2026.pdf","by":"Nipigon District Memorial Hospital","patch":null},{"at":"2026-10-01","added":"2026-11-03T21:54:09.841Z","kind":"other","text":"The hospital released further information following its initial announcement on 15 September.","url":"https://www.ndmh.ca/upload/documents/cyber-incident-public-notification-includes-faq-updated-october-13-2026.pdf","by":"Nipigon District Memorial Hospital","patch":null},{"at":"2026-09-16","added":"2026-11-03T21:54:09.841Z","kind":"other","text":"CEO Shannon Cormier said staff were using manual procedures. Outpatient laboratory and diagnostic imaging services were closed until further notice, and patients faced longer waits.","url":"https://medicalbuyer.co.in/nipigon-hospital-reports-ransomware-attack/","by":"Medical Buyer","patch":null},{"at":"2026-09-14","added":"2026-11-03T21:54:09.841Z","kind":"other","text":"Nipigon District Memorial Hospital discovered the incident, activated its response and business continuity plans, and engaged cybersecurity specialists.","url":"https://www.ndmh.ca/upload/documents/cyber-incident-public-notification-includes-faq-updated-october-13-2026.pdf","by":"Nipigon District Memorial Hospital","patch":"na"}],"url":"https://hard.fyi/live/nipigon-hospital-ransomware-patient-data-sep-2026/","json":"https://hard.fyi/api/live?id=nipigon-hospital-ransomware-patient-data-sep-2026"}