The hackers lived among Catholics for 17 days, causing them $160 million in damage.

Largest Catholic healthcare system and second largest non-profit hospital chain in the US Common Spirit Health stated that the ransomware attack that the organization suffered in October 2022 cost the company $160 million.

The ransomware attack occurred on October 2, 2022 and forced CommonSpirit Health to shut down its systems, affecting more than 100 CommonSpirit facilities in the US. During the attack, the personal data of more than 623,700 patients were exposed.

After investigating the cyberattack, it was discovered that attackers first gained unauthorized access to the CommonSpirit network on September 16, 2022. The hackers were removed from the network on October 3 after a cyber security incident was discovered. At the moment, it is not known which group is responsible for the cyber attack.

Initially, the attack was thought to have cost the company $150 million, but on May 25, 2023, CommonSpirit updated its estimate to $160 million. The organization reported this amount based on business outage costs, recovery costs, and other business-related costs.

CommonSpirit is facing two class action lawsuits related to a ransomware attack. Both lawsuits allege that CommonSpirit was negligent and did not take proper cybersecurity measures, which led to the disclosure of confidential information.