A winter ransomware attack has caused Franciscan Health to require employees to pay back wage overpayments made when it lost access to the software of its payroll vendor, Kronos.