Dutch GP practices scramble to secure patient data after Chipsoft hack

In April, a hack of Chipsoft—provider of software to nearly three-quarters of Dutch health facilities—shut down electronic patient files and digital referral networks, forcing general practitioners to rely on handwritten prescriptions, paper referrals, phone calls and fax. The breach underscored how small medical practices are increasingly targeted by cybercriminals, despite limited preparedness. The Health and Youth Care Inspectorate (IGJ) has opened a new inquiry into the information security of GP practices, following a prior report that highlighted widespread shortcomings.

Experts note that many clinics operate with outdated systems, unclear data-access rules and staffing pressures that hinder compliance. Regional doctor organisations, such as the Limburg RHO Cohesie, argue that centralised IT services could provide compliant, uniform security while allowing doctors to focus on patient care. The ministry of Health (VWS) and the IGJ continue to push for better training and oversight, but the risk of future attacks remains high.