Rankiteo Logo
Rankiteo
Leader in Cyber Underwriting
Loading...
NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop
WindowsmacOSLinux
Download
Hospital Sisters Health System

Hospital Sisters Health System Vendor Cyber Rating & Cyber Score

hshs.org
in
Add Your Compliance Badge
ISO 27001
SOC 2 Type 1
SOC 2 Type 2
PCI DSS
HIPAA
GDPR

Since 1875, the Hospital Sisters of St. Francis have been caring for patients in Illinois, Wisconsin and other locations in the United States and across the world. Today, Hospital Sisters Health System (HSHS) is a multi-institutional health care system that cares for patients in 14 communities in Illinois and Wisconsin. With 15 hospitals, scores of community-based health centers and clinics, nearly 2,300 physician partners, and more than 14,600 colleagues, HSHS is committed to its mission “to reveal and embody Christ’s healing love for all people through our high quality Franciscan health care ministry.” HSHS continues to advance its mission through its care integration strategy by working closely with physician partners in Illinois and


HSHS A.I CyberSecurity Scoring

Incident Details
HSHS
Company Information
Website:https://www.hshs.org/
Employees number:11,604
Number of followers:12,138
NAICS:62
Industry Type:Hospitals and Health Care
Homepage:hshs.org
Cyber Premium EstimationGet Supply Chain
HSHS Risk Score (AI oriented)
Between 750 and 799
logo
HSHSHospitals and Health Care
Updated:
03/04/2026
753/1000
Fair
Baa
AaaAaABaaBaBCaaCaC
Powered by our proprietary A.I cyber incident model
✖ Insurance prefers TPRM score to calculate premium
HSHS Global Score (TPRM)
xxxx
logo
HSHSHospitals and Health Care
•••
Score locked
Instant access to detailed risk factors
Vulnerabilities
Benchmark vs. industry & size peers
Findings

HSHS
HSHSFair
Current Score
753Baa (FAIR)
01000
1 incidents
0 avg impact
Incident timeline with MITRE ATT&CK tactics, techniques, and mitigations.
JULY 2026
754Before Incident
JUNE 2026
754Before Incident
MAY 2026
754Before Incident
APRIL 2026
753Before Incident
MARCH 2026
753Before Incident
FEBRUARY 2026
752Before Incident
JANUARY 2026
752Before Incident
DECEMBER 2025
751Before Incident
NOVEMBER 2025
751Before Incident
OCTOBER 2025
750Before Incident
SEPTEMBER 2025
750Before Incident
AUGUST 2025
749Before Incident
AUGUST 2023
776Before Incident
Cyber Attack
16 Aug 2023 • HSHS
Hospital Sisters Health System (HSHS)

Hospital Sisters Health System 2023 Data Breach Settlement

729After Incident
CRITICAL-47
HOS3502435100325
In August 2023, Hospital Sisters Health System (HSHS), a Midwest-based network of 13 Catholic hospitals, suffered a targeted cyberattack compromising the personally identifiable information (PII) and protected health information (PHI) of 882,782 individuals. The breach exposed data including names, addresses, dates of birth, medical record numbers, treatment details, health insurance info, Social Security numbers, and driver’s license numbers after threat actors gained unauthorized access to HSHS’s network between August 16–27, 2023. HSHS agreed to a $7.6 million settlement, offering affected individuals up to $5,000 per valid claim for out-of-pocket losses, alongside 24 months of free credit/identity monitoring. The incident led to class-action litigation alleging negligence, breach of contract, and unjust enrichment, though HSHS denied liability. The breach underscored systemic vulnerabilities in healthcare cybersecurity, prompting HSHS to commit to enhanced data security measures, though specifics were undisclosed. The financial and reputational fallout, combined with regulatory scrutiny, highlights the severe consequences of healthcare data breaches.
INCIDENT DETAILS -
TYPE
Data BreachCyberattackClass Action Litigation
IMPACT
Financial Loss: $7.6 million (settlement cost)NamesAddressesDates of BirthMedical Record NumbersTreatment InformationHealth Insurance DetailsSocial Security NumbersDriver’s License NumbersNetwork FilesPatient DatabasesClass Action LawsuitsRobocall Complaints (unrelated)Brand Reputation Impact: Significant (class action litigation, public settlement)Class Action Settlement ($7.6M)Ongoing Litigation (Illinois Genetic Information Privacy Act, Robocalls)Attorneys' Fees (~$2.6M, 35% of settlement)Identity Theft Risk: High (PII/PHI exposed)
DATA BREACH
Personally Identifiable Information (PII)Protected Health Information (PHI)Sensitivity Of Data: High (Medical, Financial, Identifiable)Patient RecordsAdministrative Files
REFERENCES
Blog URLSource URL

Frequently Asked Questions

?
What is the current A.I Rankiteo Cyber Score for HSHS ?
?
What was HSHS's A.I Rankiteo Cyber Score in June 2026 ?
?
What was HSHS's A.I Rankiteo Cyber Score in May 2026 ?
?
What was HSHS's A.I Rankiteo Cyber Score in April 2026 ?
?
What was HSHS's A.I Rankiteo Cyber Score in March 2026 ?
?
What was HSHS's A.I Rankiteo Cyber Score in February 2026 ?
?
What was HSHS's A.I Rankiteo Cyber Score in January 2026 ?
?
What was HSHS's A.I Rankiteo Cyber Score in December 2025 ?
?
What was HSHS's A.I Rankiteo Cyber Score in November 2025 ?
?
What was HSHS's A.I Rankiteo Cyber Score in October 2025 ?
?
What was HSHS's A.I Rankiteo Cyber Score in September 2025 ?
?
What was HSHS's A.I Rankiteo Cyber Score in August 2025 ?
?
What is the average per-incident point impact on HSHS's A.I Rankiteo Cyber Score over the past 12 months ?
?
Where can I access detailed records of all cyber incidents associated with HSHS ?
?
Where can I find a summary of the A.I Rankiteo Risk Scoring methodology ?
?
Where can I view HSHS's profile page on Rankiteo ?
?
How accurate is the A.I Rankiteo Risk Scoring methodology ?