BreachCalc

Documented incident: UHS reported a September 27, 2020 IT security incident, staggered restoration in October, care diversion, and billing delays into December. Its February 25, 2021 disclosure estimated a $67 million unfavorable pretax impact in 2020 ($12 million in Q3; $55 million in Q4). This is not a ransom amount or a calculator output.

Data evidence: At the time of that disclosure, UHS had identified no evidence of unauthorized access, copying, or misuse of patient or employee data. This is a dated finding, not proof that all possible exposure was excluded. Contemporary reporting described ransomware; the primary disclosures cited here do not establish an initial access route.

Fictional exercise: All network states, hourly rates, response choices, and the 12-hour clock are illustrative. They do not represent UHS’s internal network, clinical outcomes, or actual recovery duration. “Tasks” are abstract workflow units, not patients, diversions, or injuries. No PHI breach cost or legal penalty is inferred.

Completed tasks = min(outstanding tasks + new demand, capacity × interval hours). Outstanding tasks = previous outstanding + new demand − completed. At hour 12, limited fallback leaves 720 − 440 = 280 tasks; rehearsed continuity leaves 720 − 708 = 12 tasks. Baseline capacity returns at hour 12, so outstanding work still needs additional capacity. Narration compresses the exercise clock; muted playback advances at reading pace. These metrics do not modify the financial calculator below.

• UHS · October 29, 2020 restoration statement
• UHS · February 25, 2021 financial disclosure
• HealthITSecurity · October 13, 2020 ransomware reporting