MalwareRansomwareData ExfiltratedData EncryptedSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICHEALTH_BASICLowContained
Enloe Medical Center
bd_38b9ba197277c322 · schema v1 · pii pii-v1
Full breach record for Enloe Medical Center →Enloe Medical Center notified California regulators of a ransomware incident involving third-party vendor Blackbaud, Inc. occurring in May 2020. The attack resulted in encryption of Blackbaud systems and exfiltration of customer data, including names, addresses, and medical treatment details. Enloe's notification was filed on September 10, 2020.
California clockDiscovered Jul 16, 2020 → Notified Sep 10, 202056d ✓ CA 60-day OK8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-193944
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 10, 2020
- Raw hash
- 98ee67d3a23e2fa04e4854a8694e91587f0d72e4cbdf4d0dc4bee6a375f457fd
Reporting entity
- Name
- Enloe Medical Centernorm: enloe medical center
Victim entity
- Name
- Enloe Medical Centernorm: enloe medical center
Incident
- Discovered
- Jul 16, 2020
- Materiality determined
- —
- Notification sent
- Sep 10, 2020
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- notifying the United States Department of Health and Human Services and state regulators
- Third party
- via Blackbaud, Inc.
- Initial access
- supply_chain
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 56d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 16, 2020→ Notified: Sep 10, 202056d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.