Nipigon hospital ransomware closed outpatient tests and scans; later notice confirms patient-data theft
Ransomware disrupted Nipigon hospital’s outpatient tests and scans. A later hospital notice confirms stolen patient information. Check whether you fall within its affected groups and watch for impersonation scams.
Check the hospital’s notice for affected groups. Verify unexpected requests for personal information independently; send incident questions or suspected misuse reports to [email protected].
What’s happening
Ransomware disrupted Nipigon District Memorial Hospital in Ontario, closing outpatient laboratory and diagnostic imaging services and forcing manual procedures and longer waits. Its 13 October notice confirms stolen files containing patient information, including health card numbers and clinical details for some groups. The electronic medical record was unaffected. However, the same document’s FAQ contradicts the theft confirmation, saying theft is unconfirmed. Patients, relatives, employees, students and volunteers are among those identified as affected. As of 3 November, the material reviewed did not establish a total affected-person count or confirm full restoration of outpatient services.
- What
- Breach
- Affects
- Nipigon District Memorial Hospital
- Fixed in
- Nothing to patch
- Since
- 14 Sept 2026
- Closed
- 13 Oct 2026
Timeline
- Vendor revised
The hospital expanded its exposure notice to include inpatients from October 2021 to September 2026 and people screened for COVID from November 2020 to October 2022. Analysis remained ongoing.
- Update
The hospital released further information following its initial announcement on 15 September.
- Update
CEO Shannon Cormier said staff were using manual procedures. Outpatient laboratory and diagnostic imaging services were closed until further notice, and patients faced longer waits.
- UpdateNothing to patch
Nipigon District Memorial Hospital discovered the incident, activated its response and business continuity plans, and engaged cybersecurity specialists.
Sources
- Important Notice Regarding Cybersecurity Incident — updated 13 October 2026Nipigon District Memorial Hospital · 13 Oct 2026
- Nipigon Hospital reports ransomware attackMedical Buyer · 17 Sept 2026
- Cyber attack at Nipigon District HospitalCanadian Healthcare Technology · 23 Sept 2026