Malaysia awards RM29.1m eHIS deal after Ampang Hospital outage

Malaysia's health ministry awarded a RM29.1 million, three-year eHIS maintenance contract on 24 July 2026 to a company MalaysiaNow linked to Ampang Hospital's more-than-30-hour system outage in April.

For UAE hospital CIOs, COOs and CFOs, the takeaway is immediate: EMR vendor performance now affects licensing, claims, admissions, laboratory workflows, pharmacy orders and clinical continuity.

Malaysia contract raises continuity questions

MalaysiaNow reported on 17 August 2026 that the company also received a similar maintenance contract for the Hospital Information System at Hospital Sultan Ismail in Johor. MalaysiaNow said the award was about RM10 million higher than the company's February contract for Ampang Hospital.

The Ampang Hospital outage began on 23 April 2026, according to MalaysiaNow, and disrupted patient admissions, blood test procedures and drug prescriptions for several days. MalaysiaNow cited CodeBlue reporting that Ampang Hospital had system glitches more than 10 times in 2025 before the April incident.

reviewing the procurement protocol to prevent transition gaps from recurring in the future.

Why the case matters in the UAE

The UAE has tied private providers to health information exchange platforms. In Dubai, the Dubai Health Authority (DHA) runs NABIDH. In Abu Dhabi and Al Ain, the Department of Health (DOH) runs Malaffi. In the Northern Emirates, the Ministry of Health and Prevention (MOHAP) runs Riayati.

DHA said in July 2025 that NABIDH held more than 10 million medical records, covered 1,888 licensed healthcare facilities in Dubai and connected 91 electronic medical record systems. A 2023 UAE integration announcement said Riayati contained 1.9 billion medical records for 9.5 million patients.

• DHA: NABIDH covered 1,888 Dubai facilities in the first half of 2025.
• DHA: 91 EMR systems were connected to NABIDH, according to DHA's July 2025 statement.
• DOH: 2026 HIE standards apply to source EMRs and reference laboratory information systems that send data to Malaffi.
• MOHAP: Riayati is the National Unified Medical Record platform for the Northern Emirates.

DOH's 2026 health information exchange standards require coding standards, units of measurement, data classification protocols and a minimum data set for information transmitted from source EMRs and reference laboratory systems to Malaffi. For CIOs, vendor failure is a compliance risk. For COOs, it is a downtime risk. For CFOs, it can stop orders, encounters and insurance data from moving through the revenue cycle.

What UAE contracts should now contain

The Malaysia case gives UAE operators a concrete checklist because the reported harm was specific: admissions, blood tests, prescriptions and treatment schedules. Providers should map those functions to their own EMR, laboratory, pharmacy, revenue-cycle and HIE interfaces.

The next vendor scorecard should include recovery time objective, recovery point objective, test frequency, named escalation contacts and proof of failover drills at least 2 times a year. Boards should also separate implementation performance from maintenance eligibility. A supplier that passed go-live 3 years ago may still have weak patching, legacy operating systems, hardware refresh gaps or slow principal-vendor escalation.

MalaysiaNow reported that CodeBlue cited concerns over outdated software and hardware at Ampang Hospital, including computers running Windows XP. UAE audit teams should treat unsupported infrastructure as a board-level risk.

The next signal to watch is whether Malaysia's health ministry changes procurement rules after the RM29.1 million award. UAE CIOs and COOs can act before that happens: the next EMR renewal should price downtime, require recovery-test evidence and give operators a contractual route to replace vendors after repeated critical incidents.