CommonSpirit Health sued over data breach involving 600,000 patients

CommonSpirit operates 140 hospitals and more than 1,000 care sites across 21 states. Though CommonSpirit is headquartered in Chicago, it does not operate any hospitals in Illinois.

Facilities affected in the cyberattack include those in Iowa, Nebraska, Tennessee and Washington. The suit says there are at least 100 members in the proposed class, though the U.S. Department of Health & Human Services’ Office for Civil Rights