A ransomware attack on Winnipeg’s Health Sciences Centre has affected door access, heating, ventilation and air-conditioning at Manitoba’s largest hospital.

Shared Health said in a statement Monday it’s responding to what it called “a ransomware incident affecting certain facility maintenance systems.”

Patient care and clinical operations are not affected, the health authority said, urging anyone who needs to attend the hospital to do so.

“Clinical services continue uninterrupted, and based on the investigation conducted to date, there is no indication that patients have been affected,” the statement, provided to CBC News by spokesperson Tara Seel, says.

Shared Health said it has launched an investigation to determine the nature and scope of the attack and is reviewing the systems affected by it. No other systems appear to be affected, the statement said.

Shared Health also said it has notified the provincial government and has sought expert advice to try to resolve the problem.

Health Sciences Centre said in an internal memo to staff that it has increased the presence of security and institutional safety officers at hospital entrances while doors are still affected by the attack.

Darlene Jackson, president of the Manitoba Nurses Union, said the loss of control at entrances is concerning because of the number of violent incidents at the hospital in recent years.

“We were successful in getting a lot of doors shut down and ensuring that there was adequate security to make sure that every door was manned,” she said.

“It’s worrying for staff because if doors are not secure, then you can have individuals just walking into doors without anyone knowing they’re in the building.”

Auditor warned Shared Health to improve cyberscurity

This incident comes two years after Manitoba’s auditor general warned Shared Health needs to improve its cybersecurity because it was not running tests to ensure it could promptly respond to an attack.

Manitoba’s auditor general, Tyson Shtykalo, recommended annual testing and more cybersecurity training in 2024, and warned “there could be delays in responding to cybersecurity incidents at Shared Health.”

In a statement, Health Minister Uzoma Asagwara commended hospital staff for acting quickly to protect patients and staff.