Skip to content
Cyber Breaches
Search
RansomwareContained

Ransomware disrupts doors, HVAC monitoring and ID cards at Winnipeg's Health Sciences Centre

Shared Health confirmed a ransomware incident at Manitoba's largest hospital that hit facility maintenance systems, including central HVAC monitoring, door access controls and staff ID card issuance, while patient care continued.

Victim
Health Sciences Centre Winnipeg (Shared Health Manitoba)
SectorHealthcare
CountryCanada

On 10 August 2026, Shared Health, Manitoba's provincial health organization, confirmed that a ransomware incident had hit the Health Sciences Centre (HSC) in Winnipeg, the province's largest hospital. The attack did not reach clinical systems but disrupted facility maintenance systems that keep the building running.

Central monitoring of heating, ventilation and air conditioning, elevators and door access controls were affected, and staff could not issue or modify ID access cards because the systems used to manage them were down. The HSC security office was closed, HVAC equipment was monitored locally, and additional security staff were posted at entrances while door systems were impaired.

Impact on patients

Shared Health said the incident appeared to have affected only certain facility maintenance systems and that there was no indication patients had been affected; an update on 17 August repeated that patient care and clinical services continued without interruption. The organization brought in external cybersecurity experts to investigate. It did not say which group was responsible or whether a ransom was demanded, and no group publicly claimed the attack in initial reporting.

Why it matters

The incident is a clear example of ransomware reaching a hospital's building management and physical access systems rather than its electronic health records. The Manitoba Nurses Union raised concerns about any breach that could allow doors to be unlocked. Such operational technology is often managed by facilities teams or contractors outside the main IT security program, yet failures in ventilation, elevators or access control can directly affect safety in a hospital.

Timeline

  1. Shared Health confirms a ransomware incident affecting facility maintenance systems at the Health Sciences Centre.

  2. Shared Health says in an update that patient care has not been affected while recovery work continues.

Sources

  1. ctvnews.cahttps://www.ctvnews.ca/winnipeg/article/ransomware-attack-hits-facility-systems-at-manitobas-largest-hospital/
  2. bankinfosecurity.comhttps://www.bankinfosecurity.com/ransomware-attack-disables-canadian-hospitals-doors-hvac-a-32535
  3. canhealth.comhttps://www.canhealth.com/2026/08/12/ransomware-hits-doors-hvac-at-winnipeg-hospital/
  4. cbc.cahttps://www.cbc.ca/news/canada/manitoba/winnipeg-hsc-ransomware-cyberattack-9.7310005

Related incidents

RansomwareResolved

SickKids hospital ransomware attack

Toronto's Hospital for Sick Children was hit by a ransomware attack over the December 2022 holidays that delayed lab and imaging results; in a rare move, the LockBit gang apologized, blamed a rogue affiliate, and released a free decryptor.

Victim
The Hospital for Sick Children (SickKids)
RansomwareRansom paid

LifeLabs data breach

Canada's largest medical-testing laboratory disclosed that attackers had accessed health data on roughly 15 million customers, paid an undisclosed ransom to retrieve the stolen records, and was later found by privacy regulators to have failed to safeguard the information.

Victim
LifeLabs
Records
15.0M