INOVA HEALTH SYSTEM FOUNDATION

Inova Health System reported a data security incident involving third-party provider Blackbaud. A ransomware attack occurred between February 7, 2020, and May 20, 2020. The threat actor exfiltrated patient and donor information, including names, addresses, dates of birth, phone numbers, provider names, dates of service, and philanthropic giving history. Inova engaged cybersecurity professionals and set up a response line. Blackbaud paid the threat actor to destroy the data.