Skip to main content
Threats

The AZ Monica Cyberattack: Key Takeaways

Would you like to learn more?

Download our Pentest Sourcing Guide to learn everything you need to know to successfully plan, scope, and execute your penetration testing projects.

A major cyberattack on AZ Monica hospital led to the shutdown of all servers, the cancellation of scheduled procedures, and the transfer of critical patients on January 13th, 2026.

The attack forced the hospital, which operates campuses in Antwerp and Deurne, to disconnect its servers at 6:32 AM as a precautionary measure.

The cyberattack compelled AZ Monica to suspend all scheduled procedures, with 70 surgeries being cancelled. The emergency department continued to operate, albeit at reduced capacity, as emergency medical services and intensive care transport units remained offline, reports Bleeping Computer. Ambulances were partially diverted to nearby hospitals to manage the situation.

The AZ Monica Hospital Cyberattack: Why Emergency Cyberattack Measures Were Implemented

Seven patients in need of critical care were transferred to other hospitals with the assistance of the Red Cross. Although most patients remained at AZ Monica, the registration process for new patients was slowed significantly as staff resorted to manual paper records.

According to the hospital’s latest update, the investigation into the cyberattack has not revealed any evidence of leaked or misused patient data. Some IT systems have been restored, and approximately 70% of planned surgical procedures and scheduled consultations have resumed, reports Cyber News. However, several departments are still operating below full capacity.

Despite progress in resolving the situation, the IT systems of the human resources department remain down, affecting the salary payments of about 1,200 doctors, nurses, and other medical personnel. Hospital officials have assured staff members will receive partial compensation for their work, with full payment expected to resume this month.

Individual solutions will be sought for staff who worked less than average in December.

The AZ Monica Hospital Breach: Top Takeaways

The hospital’s chief physician, Jeal-Paul Sion, stated a wide range of examinations and treatments had been postponed due to the incident, including radiological exams, medical imaging and chemotherapy treatments.

“Patients who were scheduled for urgent chemotherapy today are being cared for by the University Hospital of Amsterdam. The cooperation and support we are receiving from the nearby hospitals is heartwarming,” said Sion.

Mobile emergency services and the paramedical intervention team were not operational in the wake of the breach. Although consultations continued, these were disrupted as doctors could not access electronic patient records.

Conclusion

The AZ Monica hospital cybersecurity incident highlights the growing threat of cyberattacks on healthcare facilities, emphasizing the necessity for robust cybersecurity measures.

Contact Us

Speak with an Account Executive

Interested in Pentesting?

Penetration Testing Methodology Cover
Penetration Testing Methodology

Our Penetration Security Testing methodology is derived from the SANS Pentest Methodology, the MITRE ATT&CK framework, and the NIST SP800-115 to uncover security gaps.

Download Methodology
Pentest Sourcing Guide thumbnail
Pentest Sourcing Guide

Download our Pentest Sourcing Guide to learn everything you need to know to successfully plan, scope, and execute your penetration testing projects.

Download Guide
Packetlabs Company Logo
    • Toronto | HQ
    • 401 Bay Street, Suite 1600
    • Toronto, Ontario, Canada
    • M5H 2Y4
    • San Francisco | Outpost
    • 580 California Street, 12th floor
    • San Francisco, CA, USA
    • 94104