Hospital Sisters Health System
Disclosed Oct 26, 20232 years ago882,000 affectedConfirmed
HSHS notifies 882,000 patients of August 2023 cyberattack
Hospital Sisters Health System notified over 882,000 patients that an attack discovered on August 27, 2023, which caused a system-wide outage, exposed names, birth dates, medical record numbers, treatment and insurance data, SSNs and driver's license numbers.
What is known
| People affected | 882,000 (as reported by the organization) |
|---|---|
| Disclosed | Oct 26, 2023 |
| Discovered | Aug 27, 2023 |
| Happened | Aug 16, 2023 |
| Attack | Hacking |
| Data exposed | Names, Addresses, Dates of birth, Health, Insurance, Social Security numbers, Government IDs |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Washington Attorney General breach notice: Hospital Sisters Health Systematg.wa.gov · Official notice | Official notice |
| US health system notifies 882,000 patients of August 2023 breachbleepingcomputer.com · News | News |
| Indiana Attorney General 2024 data breach report: Hospital Sisters Health Systemin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Hospital Sisters Health System (Business Associate, IL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Oct 26, 2023 | 500 |
| Indiana AGresidents of IN | Aug 30, 2024 | 28 |
| Washington AGresidents of WA | Feb 6, 2025 | 662 |
| Researchtotal | Feb 6, 2025 | 882,000 |
Other breaches at Hospital Sisters Health System
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed Jan 31, 2020Jan 31, 20206 years agoHacking | Jan 31, 20206 years ago | Hacking | Healthcare | Confirmed | 16K |
History of this record
- 2026-09-25 · source: empty to https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf · backfill source
- 2026-09-25 · disclosed: 2024-08-30 to 2023-10-26 · backfill source
- 2026-09-25 · disclosed: 2025-02-06 to 2024-08-30 · backfill source
- 2026-09-25 · data_types: [] to ["names","addresses","dob","health","insurance","ssn","government-id"] · seed source
- 2026-09-25 · records_basis: empty to organization · seed source
- 2026-09-25 · records: empty to 882000 · seed source
- 2026-09-25 · summary: empty to Hospital Sisters Health System notified over 882,000 patients that an attack discovered on August 27, 2023, which caused a system-wide outage, exposed names, birth dates, medical record numbers, treatment and insurance data, SSNs and driver · seed source
- 2026-09-25 · title: empty to HSHS notifies 882,000 patients of August 2023 cyberattack · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.