MalwareHealthcareEducationHealthcareRansomwareExtortion DemandRansom DemandedRansom PaidData EncryptedSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Health (basic)LowContained

University of Florida Health

bd_0aae4f29004b430b · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 16, 2020

Filed

Aug 13, 2020

To disclose

28 days

Affected

34state residents only

Linked

3 filings

Confidence

66%

Full breach record for University of Florida Health →

University of Florida Health notified NH AG of a third-party ransomware incident involving vendor Blackbaud. Attack occurred Feb-May 2020. 34 NH residents affected. Data included names, addresses, DOBs, and visit info. Blackbaud paid ransom and confirmed data destruction. UF Health offered 1 year credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 160 days

discovery → filing · 28 days

Feb 7, 2020

Begins

Jul 16, 2020

Discovered

Aug 13, 2020

Filed

vs. sector median

7 wks faster

This filing is one of 3 about the same incident.View merged incident

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

HHS OCRbd_2f82e5ca27b76f5d2020-08-14 · +1dVerified
Montana State AGbd_728a64ae310ce14e2020-08-12 · +1dVerified

Name: University of Florida Foundation, Inc.
norm: university of florida
Domain: ufl.edu

Name: University of Florida Health
norm: university of florida health
Industry: HealthcarellmEducationllm

Discovered: Jul 16, 2020
Breach occurred: Feb 7, 2020 – May 20, 2020
Undetected for: 160 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 12, 2020
Affected individuals: 34state-resident count only
Data types: Identity (basic)Health (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Third party: via Blackbaud
Initial access: trusted_relationship

During the incident: Began mailing notice via postal mail to New Hampshire residents
Hired ID Experts to provide identity theft protection services
Began an investigation to understand whether any data was compromised
Coordinate with our peers and Blackbaud
Changes made: Taking steps to evaluate its of incidents from occurring with UF data
Providing identity theft protection services, including one year of complimentary credit monitoring, through ID Experts
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGAug 12 · first

New Hampshire State AG+1d · this page

HHS OCR+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/university-florida-20200813.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 13, 2020
Raw hash: a19847b5ac9a5f3d0f1bfd452257e21374eda4adaaf478bdaa28cda1ad6bf531

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityUniversity of Florida Foundation, Inc.

Victim entityUniversity of Florida Health

Incidentdiscovered Jul 16, 2020

Stated responseBegan mailing notice via postal mail to New Hampshire residents

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov