CommonSpirit Health

CommonSpirit Health is now facing a class action lawsuit because of the cyberattacks that it faced in 2022.

The lawsuit was initiated because the attacks impacted facilities across one of the largest nonprofit healthcare systems in the US.

Back in the last year, CommonSpirit began reporting IT outages, EHR downtime, and appointment cancellations in early October, later confirming that these disruptions were caused by attacks.

The latest lawsuit alleges that CommonSpirit lost control of highly sensitive information as a result of the breach and suggested that the health system has not been forthcoming about the breach.

It was also alleged that the number of actual victims of the Data Breach may be much higher to approx twenty million individuals.

The plaintiffs are seeking reimbursement for out-of-pocket costs, credit monitoring services, and improvements to CommonSpirit’s data security systems.

Source: https://healthitsecurity.com/news/commonspirit-health-faces-class-action-lawsuit-in-wake-of-healthcare-data-breach

TPRM report: https://scoringcyber.rankiteo.com/company/commonspirithealth

"id": "com205827123",
"linkid": "commonspirithealth",
"type": "Breach",
"date": "01/2023",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Approx twenty million '
                                              'individuals',
                        'industry': 'Healthcare',
                        'location': 'US',
                        'name': 'CommonSpirit Health',
                        'size': 'Large',
                        'type': 'Nonprofit healthcare system'}],
 'data_breach': {'number_of_records_exposed': 'Approx twenty million '
                                              'individuals',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Highly sensitive information'},
 'date_detected': '2022-10',
 'description': 'CommonSpirit Health faced cyberattacks in 2022 that impacted '
                'facilities across one of the largest nonprofit healthcare '
                'systems in the US. The attacks resulted in IT outages, EHR '
                'downtime, and appointment cancellations. A class action '
                'lawsuit has been initiated alleging that the health system '
                'lost control of highly sensitive information and has not been '
                'forthcoming about the breach.',
 'impact': {'data_compromised': ['Highly sensitive information'],
            'downtime': ['IT outages', 'EHR downtime'],
            'legal_liabilities': ['Class action lawsuit'],
            'operational_impact': ['Appointment cancellations'],
            'systems_affected': ['IT systems', 'EHR systems']},
 'references': [{'source': 'Class action lawsuit'}],
 'regulatory_compliance': {'legal_actions': ['Class action lawsuit']},
 'title': 'CommonSpirit Health Cyberattacks',
 'type': 'Cyberattack'}