Morris Hospital & Healthcare Centers faced a ransomware attack in 2023 that compromised the personal and health information of nearly 249,000 individuals, including patients and possibly employees. The breach led to a $1.36 million class-action settlement, reflecting severe financial and reputational damage. The exposed data likely included sensitive medical records, increasing risks of identity theft, fraud, and privacy violations. As a healthcare provider, the incident also raised concerns about patient trust erosion and regulatory non-compliance (e.g., HIPAA violations). The attack disrupted operations, potentially delaying critical care, and forced the organization into costly legal resolutions. The scale of the breach affecting a quarter-million people highlights its destructive impact on both individuals and the hospital’s stability, reinforcing the high-stakes nature of cyber threats in healthcare.
TPRM report: https://www.rankiteo.com/company/morris-hospital
"id": "mor5333053090925",
"linkid": "morris-hospital",
"type": "Ransomware",
"date": "6/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': '249,000 individuals',
'industry': 'healthcare',
'name': 'Morris Hospital & Healthcare Centers',
'type': 'healthcare provider'}],
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': '249,000',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (health and personal data)',
'type_of_data_compromised': ['personal information',
'health information']},
'description': 'Morris Hospital & Healthcare Centers experienced a ransomware '
'attack in 2023 that exposed the personal and health '
'information of nearly 249,000 individuals. The incident led '
'to a consolidated class action lawsuit, which was settled for '
'$1.36 million.',
'impact': {'brand_reputation_impact': 'Likely negative (class action lawsuit)',
'data_compromised': ['personal information', 'health information'],
'financial_loss': '$1.36 million (settlement amount)',
'identity_theft_risk': 'High (personal and health information '
'exposed)',
'legal_liabilities': '$1.36 million settlement'},
'ransomware': {'data_exfiltration': 'Yes'},
'references': [{'source': "Article (title: 'Morris Hospital reaches $1.36 "
"million settlement in data breach class action')"}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit (settled for '
'$1.36 million)'},
'title': 'Morris Hospital Ransomware Attack and Data Breach (2023)',
'type': ['ransomware', 'data breach']}