Second French hospital forced to relocate patients after cyber attack this year

A stethoscope on top of a MacBook keyboard
(Image credit: Shutterstock)

A hospital in France has been hit with a cyber attack and been forced to move patients out of its facility, the second case of its kind in the country this year.

The attack hit the André Mignot hospital in Versailles on Saturday 3 December, according to the Agence régionale de santé (ARS) Île-de-France, France’s regional health service, prompting it to shut down its network as a security measure.

It said that no other health facility had been impacted by this cyber attack. The National Authority for Security of Information Systems (ANSSI), the agency in charge of the country’s computer security, is also carrying out an investigation into the incident.

“Cyber criminals know that hitting patient services and business availability is the most effective way to gain a ransom payment,” said Simon Chassar, CRO at Claroty. “The healthcare industry is one of the few sectors where cyberattacks can fatally impact human life, and threat actors know this.

“They want to put decision-makers in a morally impossible situation so that they have no choice but to pay ransoms in order to get their services back up and running. Unfortunately, situations like this are likely to increase as healthcare providers add more cyber-physical systems to their networks.”

André Mignot was forced to transfer some patients to other hospitals and is only accepting a limited number of new patients. In case of an emergency, patients are advised not to go to the site but dial 15 to reach the French Medical Services (SAMU) instead and receive instructions on where to go. ARS said it’s on-site and organising continuity of care and management of patients at a regional level with the SAMU.

The hospital has also enacted emergency measures including a “white plan”, where hospitals can reorganise internal spaces or transfer patients to other services, as well as pushing back the date for operations that are less urgent. It has also partially paused its operating theatre activities.


Accelerating healthcare transformation through patient-centred medtech solutions

Seize the digital transformation opportunities to streamline patient care and optimise patient outcomes


ARS Île-de-France has advised other healthcare establishments in the region to be vigilant in case there are more cyber attacks. The agency has also created a crisis unit to allow it to monitor the situation, support its teams, and coordinate care between hospitals.

The attack on André Mignot follows a similar incident from August 2022 when the LockBit ransomware group was thought to have attacked a hospital near Paris and demanded a ransom of $10 million.

The cyber attack was confirmed to have occurred on 21 August by the Center Hospitalier Sud Francilien (CHSF) and was reported to have been forced to turn patients away too.

Zach Marzouk

Zach Marzouk is a former ITPro, CloudPro, and ChannelPro staff writer, covering topics like security, privacy, worker rights, and startups, primarily in the Asia Pacific and the US regions. Zach joined ITPro in 2017 where he was introduced to the world of B2B technology as a junior staff writer, before he returned to Argentina in 2018, working in communications and as a copywriter. In 2021, he made his way back to ITPro as a staff writer during the pandemic, before joining the world of freelance in 2022.