CommonSpirit and media reports disclosed some facilities and states affected at the time of the breach, but the full extent was unknown until now. Crain’s previously reported that facilities in Iowa, Nebraska, Tennessee and Washington were among those affected. But according to CommonSpirit’s disclosure, facilities and services in Arkansas, Georgia, Indiana, Kansas, Kentucky, Minnesota, New Jersey, North Dakota, Ohio, Oregon,…