CommonSpirit Health ransomware attack disrupts patient care across multiple facilities

On October 2, 2022, CommonSpirit Health experienced a ransomware attack that required affected facilities to take electronic health record systems and patient portals offline. Some hospitals resorted to paper documentation, diverted ambulances and postponed appointments or procedures, materially disrupting healthcare delivery. Other CommonSpirit-associated facilities were explicitly reported as unaffected. Restoration of electronic health record access and patient scheduling functions continued over subsequent weeks. CommonSpirit later disclosed an estimated USD 160 million adverse financial impact for fiscal 2023, including lost revenue from business interruption, remediation costs and related expenses before insurance recoveries.