MalwareHealthcareHealthcareRansomwareRansom DemandedRansom PaidData ExfiltratedSupply Chain (3P Vendor)Identity (basic)Health (basic)LowContained

The Christ Hospital Health Network

bd_5f8c03614ddbde22 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 16, 2020

Filed

Sep 14, 2020

To disclose

9 weeks

Affected

9state residents only

Linked

2 filings

Confidence

66%

Full breach record for The Christ Hospital Health Network →

The Christ Hospital Health Network (TCHHN) disclosed a third-party breach involving Blackbaud, a fundraising software provider. A ransomware attack occurred between Feb 7 and May 20, 2020, resulting in data exfiltration. TCHHN was notified on July 16, 2020. Affected data included names, addresses, DOBs, and provider names. TCHHN engaged forensic experts and suspended data sharing with Blackbaud.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 160 days

discovery → filing · 9 weeks / 60 days

Feb 7, 2020

Begins

Jul 16, 2020

Discovered

Sep 14, 2020

Filed

vs. sector median

2 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_d861ca5203248ed92020-09-14Verified

Name: The Christ Hospital Health Network
norm: the christ hospital health network

Name: The Christ Hospital Health Network
norm: the christ hospital health network
Industry: Healthcarellm

Discovered: Jul 16, 2020
Breach occurred: Feb 7, 2020 – May 20, 2020
Undetected for: 160 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 9state-resident count only
Data types: Identity (basic)Health (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Third party: via Blackbaud

During the incident: Initiated an internal investigation
Engaged outside experts experienced in handling these types of incidents
Suspended sharing any additional data with Blackbaud through the application involved in this incident
Changes made: Enhancing their security controls
Conducting ongoing efforts against incidents like this in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(60 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

HHS OCRSep 14 · first

Montana State AGSep 14 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/TCHNN-Notif.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 14, 2020
Raw hash: c88a783cadd093ca44bedb63d97e366ca69fa6db30f60b48039ee9e1e632c854

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityThe Christ Hospital Health Network

Victim entityThe Christ Hospital Health Network

Incidentdiscovered Jul 16, 2020

Stated responseInitiated an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov