What Happened and What the Company Is Saying
ChipSoft, which provides patient record management software to Dutch hospitals and family doctors, disclosed the ransomware attack earlier this month. The breach resulted in the theft of sensitive patient data, including medical records, affecting a range of healthcare institutions across the Netherlands. Since then, the company says its cybersecurity specialists have verified that the stolen data has been wiped out. "Our cybersecurity experts have confirmed that this destruction was carried out in a technically correct manner," the company stated on its website.
ChipSoft has been careful with its words throughout. The company previously acknowledged it had entered into negotiations with the hackers — a detail that many observers noted but which ChipSoft has not elaborated on publicly. When pressed for more details, a spokesperson declined to say anything beyond what was already published on the company's website. Crucially, ChipSoft has not addressed whether any ransom payment was made to the cybercriminals.
Recovery Underway, But Transparency Still Limited
On its website, ChipSoft emphasized that safeguarding customer data is "always the highest priority" and that this principle weighed "very heavily" in how the situation was handled. The company added that its recovery process is moving forward smoothly, though it acknowledged that the process "naturally requires care — and time," asking customers and patients for continued patience and understanding. While the news that no data has been leaked is undoubtedly positive, the silence around whether a ransom was paid leaves a significant gap in the public account of what actually brought this episode to a close.




