HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedPIIIDENTITY_BASICLowContained
Rady Children's Health
bd_218e4aca0eeeec55 · schema v1 · pii pii-v1
Full breach record for Rady Children's Health →Rady Children’s Hospital – San Diego and its Foundation reported a data security incident involving third-party vendor Blackbaud, Inc. Between February 7, 2020, and June 4, 2020, an unauthorized party accessed backup files containing personal information of community members. The hospital retained cybersecurity experts and offered complimentary identity monitoring services via Experian. No evidence of misuse was found.
California clockDiscovered Oct 7, 2020 → Notified Oct 27, 202020d ✓ CA 60-day OK22 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-195681
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 29, 2020
- Raw hash
- bb09e759f3b9e77fee5a8a6c8ddd70e120a0e2fa26887419ba6a7dbb25a499de
Reporting entity
- Name
- Rady Children's Healthnorm: rady children s health
- Domain
- rchsd.org
Victim entity
- Name
- Rady Children's Healthnorm: rady children s health
- Domain
- rchsd.org
Incident
- Discovered
- Oct 7, 2020
- Materiality determined
- —
- Notification sent
- Oct 27, 2020
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Blackbaud reported the incident to the Federal Bureau of Investigation (FBI)
- Third party
- via Blackbaud, Inc.
- Initial access
- supply_chain
Compliance
- Time to disclose
- 22 days(22 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 20d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 7, 2020→ Notified: Oct 27, 202020d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.