Business Associate · Archived
CommonSpirit Health
633,031 individuals · submitted December 1, 2022
About this report
CommonSpirit Health, the business associate (BA), reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 633,031 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses, conditions, and other treatment information. The BA notified HHS, affected individuals, and the media. In response to the breach, the BA implemented additional administrative, technical, and security safeguards.
Summary as published by the HHS Office for Civil Rights.
- Organization
- CommonSpirit Health
- State
- IL
- Entity type
- Business Associate
- Individuals affected
- 633,031
- Submission date
- December 1, 2022
- Breach type
- Hacking/IT Incident
- Location of information
- Network Server
- Business associate present
- Yes
- OCR status
- Archived
More breach reports in IL
IL · Sep 29, 2026
Health Prime International
501 individuals
IL · Sep 4, 2026
Provident Behavioral Health
25,086 individuals
IL · Aug 26, 2026
McDermott Will & Schulte LLP
5,427 individuals
IL · Aug 20, 2026
Blue Cross Blue Shield of Illinois
3,831 individuals
IL · Aug 13, 2026
BestCare Treatment Services, Inc.
4,216 individuals
IL · Jul 23, 2026
SunCloud Health
2,594 individuals
More Hacking/IT Incident reports
NY · Oct 9, 2026
Photon Health
30,625 individuals
CA · Oct 9, 2026
Allswell Health Medical Group PA
638 individuals
WA · Oct 8, 2026
Anup K. Deol, OD PS d/b/a Eye Care Center of Snohomish
3,059 individuals
NY · Oct 8, 2026
Cognitive Health Technologies LLC
49,467 individuals
GA · Oct 7, 2026
The Speech Clinic, LLC
2,168 individuals
PA · Oct 6, 2026
Secure Healthcare Information Management, LLC
6,810 individuals