MalwareRansomwareSupply Chain (3P Vendor)Data EncryptedCustomer Data InvolvedPIIPHIIDENTITY_BASICHEALTH_BASICLowContained
TRINITY HEALTH CORPORATION
bd_6e3d23b7dac7f794 · schema v1 · pii pii-v1
Full breach record for TRINITY HEALTH CORPORATION →Trinity Health notified California regulators of a ransomware attack on third-party vendor Blackbaud's network (April 18 - May 16, 2020). The incident impacted donor and patient database backups, exposing PII (names, addresses, emails) and PHI (patient status, insurance). Trinity Health offered 12 months of identity monitoring via Kroll.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_455d1b215eba5b54Montana State AGfiled 2020-10-23Verified
- bd_ec12a22c818ff94bMaine State AGfiled 2020-10-23Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-195513
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 23, 2020
- Raw hash
- def399b787233f2ccf018ba090f0264d0ddf64dd4aa7ecfbd231114e4c509618
Reporting entity
- Name
- TRINITY HEALTH CORPORATIONnorm: trinity health
- Domain
- trinity-health.org
Victim entity
- Name
- TRINITY HEALTH CORPORATIONnorm: trinity health
- Domain
- trinity-health.org
Incident
- Discovered
- Jul 16, 2020
- Materiality determined
- Aug 18, 2020
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIPHIIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Regulator citations
- Submitted Breach Notification to California Office of the Attorney General
- Third party
- via Blackbaud
- Initial access
- supply_chain
Compliance
- Time to disclose
- 14 weeks(99 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.