DisclosureLens
MalwareHealthcareTechnologyHealthcareRansomwareSupply Chain (3P Vendor)Data ExfiltratedRansom DemandedRansom PaidCustomer Data InvolvedIdentity (basic)Government IDFinancial accountFinancial credentialsHighContained

FRANCISCAN HEALTH FOUNDATION, INC.

bd_1856a9ffe5ef4561 · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 16, 2020

Filed

Nov 13, 2020

To disclose

17 weeks

Affected

11,040

Confidence

66%
Full breach record for FRANCISCAN HEALTH FOUNDATION, INC. →2 incidents on file

Franciscan Health Foundation, Inc. reported a ransomware attack targeting its third-party vendor, Blackbaud, affecting approximately 11,040 individuals (including 7 New Hampshire residents). The incident occurred between February 7, 2020, and May 20, 2020. Exposed data included names, addresses, phone numbers, check images, financial account numbers, emails, dates of birth, and donor history. Blackbaud paid a ransom and confirmed data destruction. The Foundation notified the NH Attorney General on November 12, 2020, and began notifying affected individuals on November 13, 2020, offering one year of credit monitoring and identity theft protection.

Incident timeline

undetected · 160 days
discovery → filing · 17 weeks / 120 days

Feb 7, 2020

Begins

Jul 16, 2020

Discovered

Nov 13, 2020

Filed

vs. sector median

+6 wks slower

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed11,040 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.