--- title: CommonSpirit Health IT systems disrupted, ransomware suspected description: CommonSpirit Health, one of the largest nonprofit hospitals in the US, has seemingly been hit by a cyberattack. The organization faced a disruption of its IT systems that led to some delays in patient care. canonical_url: https://www.acronis.com/en/tru/posts/commonspirit-health-it-systems-disrupted-ransomware-suspected/ locale: en last_updated: 2026-10-27 --- * [Home](https://www.acronis.com/en/tru/) * [Articles](https://www.acronis.com/en/tru/posts/) * [Acronis Threat Research Unit](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/) 10 October 2022 # CommonSpirit Health IT systems disrupted, ransomware suspected CommonSpirit Health, one of the largest nonprofit hospitals in the US, has seemingly been hit by a cyberattack. The organization faced a disruption of its IT systems that led to some delays in patient care. Author: **[Acronis Threat Research Unit](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/)** [Video 1](https://www.youtube.com/watch?v=Ydqc-Bto0g4) CommonSpirit Health, one of the largest nonprofit hospitals in the US, has seemingly been hit by a cyberattack. The organization faced a disruption of its IT systems that led to some delays in patient care. According to reports, the IT department identified a security issue affecting some facilities. As a precaution, certain systems were taken offline according to the existing incident response plan. The hospital network did not confirm the cause of the incident, but multiple sources believe it to be a ransomware attack. CommonSpirit Health manages 142 hospitals and nearly 1,000 care sites in 21 states, with around 150,000 employees. The organization claims that disruption to patients was minimal in the aftermath of this incident, with few needing to be sent home. Acronis Cyber Protect detects and blocks malware used in such attacks, with the included multi-layered Behavioral and AI-Powered Detection Engines. The integrated disaster recovery option ensures smooth continuation of the business systems. Related articles [The Gentlemen: A closer look at a not-so-gentle ransomware-as-a- service operation](https://www.acronis.com/en/tru/posts/the-gentlemen-a-closer-look-at-a-not-so-gentle-ransomware-as-a-service-operation/) [Acronis AI Copilot: Adoption is high and growing among MSPs](https://www.acronis.com/en/tru/posts/acronis-ai-copilot-adoption-is-high-and-growing-among-msps/) [Acronis Cyberthreats Update, October 2026](https://www.acronis.com/en/tru/posts/acronis-cyberthreats-update-october-2026/) [AI agents at work: What Acronis endpoint data reveals about MSP and SMB usage](https://www.acronis.com/en/tru/posts/ai-agents-at-work-what-acronis-endpoint-data-reveals-about-msp-and-smb-usage/)