Chicago-based CommonSpirit Health said many of its current and former Catholic Health Initiatives, Centura Health and MercyOne facilities were affected by last year's ransomware attack on the health system.
In an April 6 update, CommonSpirit said the unauthorized third party obtained copies of data from two file share servers containing information on individuals going back years. It said its EHR was not breached. The health system started notifying affected people by mail April 6.
The data may have included personal identifying information, including Social Security numbers for a "small number of individuals," as well as diagnosis, treatment, medical billing and health insurance information, CommonSpirit said, adding that it has no evidence that any of it has been misused.
The health system has previously stated the breach affected patients at Seattle-based Virginia Mason Franciscan Health and Houston-based St. Luke's Diagnostic Cath Lab Diagnostic Heart Center.
These facilities were part of the data breach, which happened from Sept. 16 to Oct. 3, according to CommonSpirit:
Arkansas
St. Vincent Infirmary, Little Rock
St. Vincent North, Sherwood
St. Vincent Hot Springs
St. Vincent Morrilton
CHI St. Vincent Medical Group, Little Rock
CHI St. Vincent Medical Group, Hot Springs
Georgia
CHI Memorial Georgia Hospital, Fort Oglethorpe
CHI Memorial - Parkway, Ringgold
CHI Memorial Medical Group, all locations
Iowa
CHI Health Mercy Council Bluffs
CHI Health Missouri Valley
CHI Health Mercy Corning
Kentucky
Flaget Memorial Hospital, Bardstown
Saint Joseph Hospital, Lexington, Nicholasville
Saint Joseph Health Community Pharmacy, Lexington
Saint Joseph - Berea
Saint Joseph East, Lexington
Saint Joseph London
Saint Joseph Martin (sold)
Saint Joseph Mount Sterling
Saint Joseph Mount Sterling Outpatient Rehab
Saint Joseph Mount Sterling Outpatient Rehab, Flemingsburg
Continuing Care Hospital, Lexington
CHI Saint Joseph Medical Groups, Central and Eastern Kentucky
Jewish Hospital - Louisville, sold, formerly part of CHI
Minnesota
CHI LakeWood Health, Baudette
CHI St. Francis Health, Breckenridge
CHI St. Joseph's Health, Park Rapids
CHI St. Gabriel's Health, Little Falls
CHI St. Francis Home, Breckenridge
CHI Health at Home, all locations
Nebraska
CHI Health Lakeside, Omaha
CHI Health Midlands, Papillion
CHI Health Plainview
CHI Health Creighton University Medical Center - Bergan Mercy, Omaha
Lasting Hope Recovery Center, Omaha
CHI Health Immanuel, Omaha
CHI Health Schuyler
CHI Health Good Samaritan, Kearney
CHI Health Richard Young Behavioral Health, Kearney
CHI Health Nebraska Heart, Lincoln
CHI Health St. Elizabeth, Lincoln
CHI Health St. Francis Grand Island
CHI Health St. Mary's, Nebraska City
The Physician Network (including Nebraska Specialty Network and Lincoln Physician Network), all locations
North Dakota
CHI St. Alexius Medical Center, Bismarck
CHI St. Alexius Health Carrington & Clinics (includes Foster County Medical Center)
CHI St. Alexius Carrington Urgent Care
CHI Lisbon Health
CHI St. Alexius Health Devils Lake & Clinics
CHI Mercy Health Valley City
CHI St. Alexius Health Williston
CHI Oakes Hospital & Clinics
CHI St. Alexius Health Turtle Lake
CHI St. Alexius Health Garrison & Clinics
CHI St. Alexius Health Dickenson & Clinics
CHI Health at Home, Fargo
CHI Friendship, Fargo
CHI St. Alexius Physician Clinics, all Locations
Ohio
Trinity Medical Center East and West, Steubenville
Trinity Hospital Twin City, Dennison
Ross Park Pharmacy, Steubenville
Trinity Professional Group, all locations
Trinity Home Health, all locations
Oregon
CHI Mercy Health Medical Center, Roseburg
CHI St. Anthony Medical Center, Pendleton
Oregon Surgery Center, Roseburg
Centennial Medical Group, Roseburg
Pennsylvania
CHI St. Joseph Children's Health, Lancaster
Tennessee
CHI Memorial Hospital Chattanooga
CHI Memorial Hospital Chattanooga Outpatient Pharmacy
CHI Memorial Hospital Hixson
Chattanooga Heart Institute
CHI Memorial Medical Group, all locations
Texas
CHI Baylor St. Luke's Medical Center, Houston
CHI St. Luke's Health Hospital at The Vintage, Houston
CHI St. Luke's Health Brazosport Hospital, Jackson
CHI St. Luke's Health Lakeside Hospital, The Woodlands
CHI St. Luke's Health Patients Medical Center, Pasadena
CHI St. Luke's Health Springwoods Village, Spring
CHI St. Luke's Health Sugar Land Hospital
CHI St. Luke's Health The Woodlands
CHI St. Joseph Regional Medical Center, Bryan
CHI St. Joseph Health Burleson Hospital
CHI St. Joseph Health Grimes Hospital, Navasota
CHI St. Joseph Health Madison Hospital, Madisonville
CHI St. Joseph Health College Station Hospital
St. Joseph Encompass Health Rehab, Bryan
St. Joseph Skilled Nursing and Rehab, Bryan and Caldwell
CHI St Luke's Health Memorial Lufkin
CHI St Luke's Health Memorial Livingston
CHI St Luke's Health Memorial St. Augustine
CHI St. Luke's Medical Group, all locations
CHI St. Joseph Health Medical Group, all locations
CHI St. Luke's Health Memorial Clinics, all locations
Washington
St. Michael Medical Center (formerly Harrison Hospital), Bremerton and Silverdale
St. Anne Hospital (Formerly Highline Hospital), Burien
St. Anthony Hospital, Gig Harbor
St. Clare Hospital, Lakewood
St. Elizabeth Hospital, Enumclaw
St. Francis Hospital, Federal Way
St. Joseph Hospital, Tacoma
The former CHI Franciscan Health System, Tacoma
Franciscan Health Medical Group, all locations
Franciscan Hospice and Palliative Care, Tacoma
CHI Health at Home
Albany Area Home Health and Hospice, North Dakota - closed
American Nursing Care, Columbus, Ind.
American Nursing Care, Dayton, Ohio
American Nursing Care, Marion, Ohio
American Nursing Care, Zanesville, Ohio
American-Mercy Home Care, Cincinnati
Amerimed Home Infusion, Indianapolis
Amerimed Home Infusion, Lexington and Louisville, Ky.
Amerimed Home Infusion, West Chester, Ohio
CHI Franciscan Health at Home, University Place, Wash.
CHI Franciscan Hospice and Palliative Care, Tacoma, Wash.
CHI Health at Home, Breckenridge and Little Falls, Minn.
CHI Health at Home, Bismark, Dickinson, Valley City, and Williston, N.D.
CHI Health at Home, Plainview, Neb.
CHI Health at Home, Milford Cincinnati, Ohio
CHI Health at Home Hospice, Lincoln and Omaha, Neb.
CHI Health at Home Infusion, Omaha, Neb.
CHI Health at Home, Home Care, Grand Island, Lincoln, Omaha, Neb.
CHI Health Pharmacy, Omaha, Neb.
CHI Memorial Health at Home, Chattanooga, Tenn.
CHI St. Joseph's Hospice, Park Rapids, Minn.
CHI St. Vincent Health at Home Hot Springs, Little Rock and Morrilton, Ark.
Community Health at Home, Indianapolis
Community Mercy Home Care, Springfield, Ohio
Community Mercy Home Care Pharmacy, West Chester, Ohio
Cornerstone Medical Services (closed), Cincinnati, Columbus and Akron, Ohio
Deaconess Home Health, Evansville, Ind.
Good Samaritan Home Care, Vincennes, Ind.
Good Samaritan Home Care, Lawrenceville, Ill.
Great Plains Rehabilitation Services, Bismarck, Dickinson, N.D.
Hospice House University Place, Tacoma, Wash.
Josie Harper Hospice House, Omaha, Neb.
MedQuest Home Medical Equipment, Williston, N.D.
Mercy Home Health, Roseburg, Ore.
Reid Home Health Care, Eaton, Ohio
Reid Home Health Care, Richmond, Ind.
Southeastern Home Care, Barnesville and Cambridge, Ohio
St. Elizabeth Home Care, Florence, Ky.
St. Elizabeth Home Care, Lawrenceburg, Ind.
St. Elizabeth Home Medical Equipment, Lincoln, Neb,
St. Vincent Health at Home Arkansas
Virginia Mason Franciscan Pharmacy & Home Care, Tacoma, Wash.
VNA Health at Home, Clarksville, Ind.
VNA Health at Home, Bardstown, Campbellsville, Elizabethtown, Lexington, London and Louisville, Ky.
VNA Health at Home Hospice, Bardstown and London, Ky.
Associated and former CommonSpirit/CHI facilities
Centura Health System, Colorado and Kansas
Jewish Hospital, Louisville, Ky.
Mercy Medical Center Des Moines (Iowa) and Affiliates
Mercy Home Health Services - Iowa
Mercy Hospice, Johnston, Iowa
St. Clare's Hospital, Denville, N.J.
St. Joseph Medical Center, Reading (Pa.)
University of Louisville (Ky.) Medical Center