MicroCode Software Services Discloses Ransomware Breach Affecting CommonSpirit Health Data MicroCode Software Services Inc., an IT vendor for CommonSpirit Health, reported a data breach stemming from a ransomware attack that exposed sensitive medical malpractice insurance records. The incident was disclosed to the Washington Attorney General on July 30, 2026, with 4,096 Washington residents confirmed as affected. The breach occurred after unauthorized access to MicroCode’s server hosting CommonSpirit Health’s database was detected between January 19 and April 14, 2026. A forensic investigation revealed that the ransomware attack on April 14, 2026, compromised the system, prompting MicroCode to review the impacted data. By July 1, 2026, the company confirmed that personally identifiable information (PII), including names and dates of birth, was exposed. However, Social Security numbers, financial account details, and other highly sensitive data were not accessed. In response, MicroCode engaged Kroll, a third-party firm, to operate a call center for affected individuals. The company also mailed notification letters with resources for credit monitoring and fraud protection. The breach highlights ongoing risks in third-party vendor security within the healthcare sector.