The Chicago-based health system reported the financial impact of the ransomware attack Feb. 15 in its annual earnings statement. The $150 million financial impact includes lost revenues due to business disruption and extra costs to fix the IT issues.
CommonSpirit hospitals reported EHR and IT system downtime during the attack, and the system is working with law enforcement agencies to investigate the attack. The health system reported 623,774 patients’ data was breached during the attack and patients have sued the system for failing to prevent the attack.
“The organization is aware of lawsuits filed as potential class actions against CommonSpirit regarding the cybersecurity incident. There can be no assurance that the resolution of this matter will not affect the financial condition or operations of CommonSpirit, taken as a whole,” states the financial report.
CommonSpirit reported consulting with insurance carriers about potential recoveries, but was unable to provide a timetable or amount of recovery.
The health system had a $451 million operating loss for the second half of 2022, with staffing expenses being a major challenge.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.