Cyber Security Blog

Belgium Hospital Cyber Attacks

Written by Craig Pepper | Jan 21, 2026 1:30:00 PM

Belgian Hospital Cyberattack Cancels 70 Surgeries, Transfers Critical Patients in Growing Healthcare Security Crisis

On January 13, 2026, AZ Monica hospital in Antwerp, Belgium, suffered a major cyberattack that shut down its entire computer system. The hospital had to cancel surgeries, and seven critically ill patients were rushed to other hospitals. This incident shows just how dangerous ransomware attacks can be for patient care.

What Happened at AZ Monica Hospital?

Early Tuesday morning at 6:32 AM, IT staff noticed something was wrong. Hackers were attacking their computer network. Hospital leaders quickly shut down all servers at both their Antwerp and Deurne locations to stop the attack from spreading.

The results were immediate and serious:

  • 70 surgeries were canceled on day one
  • Operations stayed canceled through Wednesday
  • Doctors and nurses couldn't access patient records
  • Staff had to write everything down on paper
  • The emergency room could only help a limited number of patients
  • Seven very sick patients had to be moved to other hospitals with help from the Red Cross

Was It Ransomware?

Hospital leaders haven't shared all the details, but multiple sources say this was a ransomware attack. Ransomware is when hackers lock a computer system and demand money to unlock it.

Local newspapers reported that the hackers may have asked for ransom money, but the hospital hasn't confirmed this. Belgium's police and cybercrime experts are investigating to find out exactly what happened and who was responsible.

Belgium's Hospitals Are Under Attack

AZ Monica isn't alone. Belgian hospitals are facing more cyberattacks than ever before:

  • In 2025, hospitals got hit with an average of 2,620 attacks every week
  • Healthcare is now the most attacked industry in Belgium
  • Cyberattacks on Belgian organizations doubled between 2020 and 2025
  • In 2025, there were 45 healthcare cyber incidents, up 30% from the year before

Why are hospitals such popular targets? Hackers know that:

  • Medical records are worth a lot of money on the dark web
  • Many hospitals use old computer systems that are easier to hack
  • Patient data includes everything from addresses to insurance information
  • Hospitals will pay quickly because patients' lives are at risk

This Is a Worldwide Problem

Belgium isn't the only country dealing with this crisis. Hospital ransomware attacks jumped 30% globally in 2025. In just the first nine months of that year, 293 hospitals and clinics were attacked.

Some experts predict that by the end of 2026, 60% of health systems will have problems delivering care because of ransomware.

The scariest part? These attacks cost lives. Research shows that more than 20% of hospitals hit by cyberattacks report more patient deaths after the incident. One study found that ransomware attacks led to between 42 and 67 patient deaths in the US between 2016 and 2021.

The Problem Got Bigger: A Data Leak Too

While investigating the AZ Monica attack, cybersecurity experts found something worse. At least five Belgian hospitals had been hacked through their patient registration software company.

This second attack leaked personal information for about 71,000 patients and healthcare workers onto the dark web. This shows how one weak link in the chain can put multiple hospitals at risk.

Why Hackers Target Hospitals

From a criminal's point of view, hospitals are the perfect target:

Valuable Information: Medical records have everything - your full medical history, insurance details, prescriptions, and personal information. This data sells for high prices to identity thieves.

Time Pressure: When a store gets hacked, customers might not notice for months. When a hospital gets hacked, everyone knows immediately because doctors can't access patient files.

Life and Death: Hackers know that canceled surgeries and delayed treatments put lives at risk. This creates massive pressure to pay the ransom quickly.

Old Computer Systems: Many hospitals use outdated technology that's easier to hack. They often can't afford to upgrade because they need to spend money on patient care instead.

What Is Belgium Doing About It?

The Belgian government is taking this threat seriously:

  • Prime Minister Alexander De Croo held an emergency meeting and created a special task force
  • The Health Minister announced €5 million in funding to improve hospital cybersecurity
  • New laws will require hospitals to report attacks within 24 hours
  • Belgium is working with other European countries to share information and defenses

AZ Monica hospital is slowly getting back to normal. By mid-January, they planned to reopen at half capacity while continuing to fix their systems. The hospital has requested €15 million over the next three years to install better security, including AI systems that can detect threats and blockchain technology to protect medical records.

What Can Hospitals Learn From This?

The AZ Monica attack teaches important lessons:

  1. Watch for Problems Early: Because AZ Monica caught the attack quickly, they could shut down systems fast and limit the damage.
  2. Check Your Software Companies: The data leak happened through a software vendor, showing that hospitals need to carefully monitor the companies they work with.
  3. Have a Backup Plan: AZ Monica had procedures in place to transfer critical patients safely and keep emergency care running.
  4. Upgrade Old Systems: Outdated computers are easier to hack. Hospitals need consistent funding to keep technology current.
  5. Train Your Staff: When computers went down, staff knew how to keep working with paper. This preparation saved lives.

The AZ Monica attack shows that hospital cybersecurity isn't just about protecting computers - it's about protecting patients. When hospitals can't access their systems, people can die.

With 70 canceled surgeries and seven patients needing emergency transfers, this attack proves that ransomware is a patient safety issue. Hospitals must treat cybersecurity as essential, not optional. The cost of not protecting systems is simply too high when lives are on the line.