2026 Shared Health / HSC Winnipeg — ransomware on facility management (doors, HVAC); OT incident
Data compromised
Operational technology / facilities systems (access control, HVAC). Shared Health stated no indication patients were affected at indexing; no attested PHI census — recordsAffected 0.
Technical writeup
Verified operational-technology ransomware — August 2026. Shared Health confirmed to ISMG/BankInfoSecurity that Winnipeg’s Health Sciences Centre (Manitoba’s provincial tertiary trauma/transplant/neurosciences hospital, >570,000 patients annually) is responding to a ransomware attack on facility management systems that affected building doors and HVAC. A spokesperson said the incident appears limited to certain facility maintenance systems, with no indication patients were affected based on investigation to date; clinical operations continued while third parties assisted remediation. Manitoba Nurses Union leadership told CBC that unlocked doors raise staff safety concerns given prior building-security issues. No ransomware group had claimed responsibility in sources reviewed at indexing. BreachHistory tracks this as a confirmed OT/facilities incident with recordsAffected 0 pending any later PHI disclosure.
Root cause
Ransomware attack on facility management / building systems at Health Sciences Centre (operated by Shared Health); doors and HVAC affected per spokesperson and local reporting
References
- https://www.bankinfosecurity.com/ransomware-attack-disables-canadian-hospitals-doors-hvac-a-32535
- https://databreaches.net/2026/08/12/ransomware-attack-disables-canadian-hospitals-doors-hvac/
- https://www.cbc.ca/news/canada/manitoba/health-sciences-centre-ransomware-hack-9.7302058
- https://hsc.mb.ca/about/