Important information regarding a ransomware attack: customer data has been stolen
We have an important announcement regarding a cyberattack by criminals at ChipSoft, the supplier of our patient registration system. On 7 April 2026, ChipSoft, the supplier of our patient registration system, discovered that there
were anomalies in the online patient registration system. Following an investigation, they determined that this was a ransomware attack. Together with ChipSoft, we took immediate action and severed
connections with ChipSoft to limit the impact of the incident and safeguard the security of patient and staff data as effectively as possible.
Unfortunately, the cybercriminals gained access to patient data. They subsequently stole data. It is currently unclear exactly which personal data is involved.
What does this mean for you?
Criminals may try to misuse this information. For example, through scams.
Potential risks to you include:
• Phishing: you receive emails, text messages or phone calls that appear to be genuine (e.g. from our organisation or your treating doctor). Because the criminals have your details, they can make the email seem very personal. This makes the email appear genuine. For example, you may be asked to click on a link. If you do this, you may be scammed.
• Criminals may also ring you. The criminal may, for example, pretend to be a member of staff at our organisation or a family member. Are you asked to give out passwords or download something onto your computer? Do not do so. You could be scammed. Therefore, check first with our organisation or your family member to confirm that they really did ring you.
• Identity fraud: a criminal may misuse your personal data by pretending to be you.
• Targeted fraud: messages that exploit your medical situation.
• Disclosure of your medical information, which may lead to discrimination or damage to your reputation.
• Social engineering: attempts to obtain additional information from you by gaining your trust. The criminal does this by using the leaked information.
What can you do to avoid risks?
Be extra vigilant in the coming period and don’t just click on links in emails, text messages and app messages. You can sometimes spot a suspicious email, text message or app message by looking out for spelling mistakes and unknown senders. Check the phone number. Or what comes after the ‘@’ symbol in an email address. If the message contains a link to a website, it is better to type the website address into your browser yourself rather than clicking on the link.
Never give anyone your password or PIN.
We offer the following advice:
• Be extra vigilant about unexpected emails, text messages or phone calls.
• Do not click on links or open attachments if you do not fully trust the sender.
• Do not share personal or medical details via email or telephone without first checking that you are dealing with a trustworthy party.
• If in doubt, contact our organisation directly on +31 (0)492 8200 74
• Check your bank statements regularly and report any suspicious transactions to your bank immediately.
Further information
For further information on identity fraud and how to prevent it, please visit the two websites below. We refer you to these on the advice of the Dutch Data Protection Authority:
• https://www.politie.nl/onderwerpen/identiteitsfraude.html
• https://www.rijksoverheid.nl/onderwerpen/identiteitsfraude
Our role as your healthcare provider
We are working closely with all parties involved, such as ChipSoft, to minimise the impact. Specialised external cybersecurity experts and our supplier ChipSoft are, of course, also working hard on expert (forensic) investigations. These experts are also closely monitoring how the situation develops. As a healthcare provider, we have also reported the data breach to the Dutch Data Protection Authority (AP).
Your rights
As a patient, you have privacy rights, such as the right to access and correct the personal data we process on your behalf. You may also lodge a complaint with the AP yourself. For further information, please visit https://www.autoriteitpersoonsgegevens.nl/.
Further information
Our supplier ChipSoft has set up a helpline (available by telephone) for questions regarding the ransomware attack. Do you have any general questions? Please call this number. The specialist lawyers engaged by ChipSoft can be reached via this helpline from 9 am to 5 pm 📞 +3188‑1236122
Contact