Hospital Sisters Health System reported a targeted cyberattack involving its computer systems to a state attorney general. The data incident occurred between August 16 and August 27, 2023, and the available records identify August 16, 2023, as the discovery date. The sources reviewed do not state when the incident was publicly disclosed or when regulators and consumers were notified.
Certain files were accessed and may have contained personally identifiable information and personal health information, including Social Security numbers, health insurance information, and driver's license numbers. The entity-level number of affected individuals has not been disclosed in the sources reviewed. A class action, In re Hospital Sisters Health System Data Breach Litigation, Case No. 2024CH000043, was filed in the Chancery Court of Sangamon County, Illinois, and settlement proceedings were reported in 2025. Further details about the incident and notification process may emerge through court or regulatory records.