CommonSpirit Health sued over data breach involving 600,000 patients

January 04, 2023


Katherine Davis

Chicago-based Catholic hospital chain CommonSpirit Health has been hit with a proposed class-action lawsuit over its month-long data breach at the end of last year that impacted more than 600,000 patients.

The lawsuit alleges that CommonSpirit was negligent in protecting patients from the threat of cyberattacks that leak private and sensitive patient health, insurance and financial information, and can put consumers at a heightened risk for identity theft and financial fraud. The complaint argues that CommonSpirit had “inadequate” data security measures to protect and secure patient information. Read the complaint below.

Not a Modern Healthcare subscriber? Sign up today.

CommonSpirit operates 140 hospitals and more than 1,000 care sites across 21 states. Though CommonSpirit is headquartered in Chicago, it does not operate any hospitals in Illinois.