Summary
- Two successive electrical interruptions at SPMS infrastructure on 19 October disrupted national health applications.
- Most central systems were restored that afternoon, but the doctors’ federation reported continuing local constraints on 23 October.
- SPMS plans power architecture improvements and a new real-time redundancy environment.
Portugal’s national medical federation has demanded a full explanation of power interruptions at a health data centre after clinical information systems and electronic prescriptions became unavailable across parts of the National Health Service. The federation said on 23 October that restoration had not eliminated the consequences for patients and clinical staff.
SPMS, the organisation responsible for shared technology services at the Ministry of Health, attributed the original disruption on 19 October to electrical interruptions at its northern data centre. It reported two successive events. The first was resolved relatively quickly, but the second made several national systems unavailable.
Problems began at about 10am local time. Healthcare organisations reported difficulties accessing records, issuing prescriptions and processing information through the systems normally used in consultations and hospital work. The affected platforms included the National User Registry, the Electronic Medical Prescription system and the Electronic Health Record.
SPMS said technical teams had restored virtually all affected services by approximately 3pm that afternoon. Public statements later on 19 October described the central incident as resolved. The National Federation of Physicians, however, continued to receive reports of difficulties in some Local Health Units, particularly involving prescription issuing and clinical record access.
In its 23 October follow-up, the federation asked the Ministry of Health to clarify the cause, scale and remedial measures. It drew attention to the additional work created when information entered during an interruption must be reconciled with central clinical systems after service is restored.
The electrical cause has not been described in sufficient engineering detail to establish which equipment failed. The information available does not identify a particular generator, UPS module, switchgear component or transfer arrangement as responsible. Assigning fault to any of those systems without a technical investigation would be speculative.
The effects of an infrastructure interruption can propagate well beyond a single building. A centralised healthcare platform may support appointments, prescriptions and records at numerous locations, even though the local hospital or surgery has its own electricity and network connection. A failure in shared infrastructure can consequently interrupt services across otherwise operational premises.
These systems also depend on more than server power. Databases, storage, application services, authentication and connectivity must operate together. Restarting the underlying computing environment does not necessarily confirm that every clinical transaction can be completed immediately or that data created offline has been reconciled.
Electrical resilience is normally designed around the consequences of losing one component or supply. Depending on the risk assessment, infrastructure may include independent power paths, batteries, standby generators, protective devices and monitoring systems. The actual level of fault tolerance depends on how the components are connected and maintained, rather than their individual existence.
A shared switchboard, control dependency or maintenance arrangement can undermine otherwise duplicated equipment if it creates a common point of failure. Equally, faults can occur during a transfer between power sources or while operators restore normal conditions. No published evidence identifies which, if any, of those mechanisms contributed to the Portuguese incident.
SPMS has said it will overhaul the electrical architecture of its existing data centre. It also expects a new infrastructure environment to be available before the end of 2026, financed through Portugal’s Recovery and Resilience Plan. The planned environment is intended to provide real-time redundancy for principal national health systems.
Clinical records and prescriptions also create practical recovery demands after normal access resumes. Staff must establish whether entries made on paper or deferred during the outage have been transferred accurately, without creating duplicate treatments, prescribing mistakes or gaps in patient histories.
The effectiveness of that approach will depend on implementation details. Maintaining an additional copy of data does not by itself provide a functioning alternative application service. Operators need workable switching arrangements, synchronised information where required, adequate network connectivity and procedures that can be tested under realistic failure conditions.
An earlier interruption in June was separately acknowledged by SPMS, which said the October incident had a different origin. Similar consequences do not establish identical technical causes, and the two events should not be combined into a single fault narrative.
The federation is demanding a full account of the recovery process, including restoring critical applications, reconciling records, protecting patient services and documenting why electrical protection did not prevent wider unavailability. The announced power and redundancy upgrades must be tested under realistic operating conditions before any reduction in risk can be established.
