CommonSpirit Health Increases Ransomware Attack Cost Estimate to $160 Million
The Chicago, IL-based Catholic health system, CommonSpirit Health, has reported an operating loss of $1.4 billion for fiscal year 2023, up slightly from the $1.3 billion operating loss reported for fiscal year 2022.
The CommonSpirit Health ransomware attack in October 2022 was a significant factor in the $1.4 billion operating loss as it caused significant disruption to its billing and collection activities. CommonSpirit Health has estimated the financial losses caused by the attack have now reached 160 million, which includes losses caused by business disruption, remediation costs, and other business expenses. The latest figure is $10 million greater than its previous estimate issued in May 2023. While the attack only caused short-term disruption to patient services, significant disruptions were experienced with claims processing and collections, and the records of 624,000 patients, family members, and caregivers were exposed and potentially stolen.
CommonSpirit Health has previously stated that it anticipates its cybersecurity insurance to cover a significant percentage of the costs of the attack but has been unable to confirm the extent to which it will be covered or when its insurance policy will pay out. CommonSpirit Health is also facing several class action lawsuits over the ransomware attack that allege the health system was negligent for failing to prevent the attack and data breach. One of the lawsuits alleges up to 1 million patients had their data exposed in the attack. While CommonSpirit Health maintains there was no wrongdoing, it was unable to provide any assurance that the lawsuits will not affect its financial condition.
Other factors that contributed to the operating losses were labor shortages, inflation, declining acuity and rates, and charges associated with the laying off of around 2,000 full-time employees in Q4, 2022. While operating losses increased year over year, CommonSpirit Health reports a 0.5% increase in revenues compared to 2022, which rose to $34.6 billion. CommonSpirit Health said that given the difficulties with labor shortages and inflation, which are affecting many healthcare providers, it is focusing on initiatives and opportunities for pursuing growth, cost reduction, and improvements in efficiency.
Get The FREE
HIPAA Compliance Checklist
Immediate Delivery of Checklist Link To Your Email Address
Please Enter Correct Email Address
Your Privacy Respected
HIPAA Journal Privacy Policy
