MalwareRansomwareSupply Chain (3P Vendor)Data ExfiltratedData EncryptedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
Saint Luke's Foundation
bd_40681e258ce07a60 · schema v1 · pii pii-v1
Full breach record for Saint Luke's Foundation →Saint Luke's Foundation reported a ransomware incident involving third-party vendor Blackbaud. The attack occurred between Feb 7 and May 20, 2020, resulting in the encryption and exfiltration of a backup file containing patient demographics, contact info, DOB, and limited medical data. Blackbaud contained the threat, deleted the file, and implemented security hardening. No SSNs or financial data were compromised. Rhode Island residents were specifically noted as potentially impacted.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_5bcfb721c1a28b41HHS OCRfiled 2020-08-20Verified
- bd_a719806d5eb32ec0Montana State AGfiled 2020-08-20Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-193317
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 20, 2020
- Raw hash
- 449a08b73131eb6944e53b02e643b9c92260e0c868f33aee020cef5098d55cea
Reporting entity
- Name
- Saint Luke's Foundationnorm: saint luke s
Victim entity
- Name
- Saint Luke's Foundationnorm: saint luke s
Incident
- Discovered
- Jul 16, 2020
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Initial access
- supply_chain
Compliance
- Time to disclose
- 5 weeks(35 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.