MalwareRansomwareData ExfiltratedData EncryptedSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICPIILowContained
Valley Presbyterian Hospital
bd_b3a1e8ac88aee0f7 · schema v1 · pii pii-v1
Full breach record for Valley Presbyterian Hospital →Valley Presbyterian Hospital Foundation reported a ransomware incident involving third-party vendor Blackbaud, Inc. occurring between May 14 and May 20, 2020. The attacker encrypted systems and exfiltrated data, including names and other personal information. Valley Presbyterian provided 12 months of complimentary credit monitoring via TransUnion to affected individuals.
California clockDiscovered Jul 31, 2020 → Notified Jul 31, 20200d ✓ CA 60-day OK22 weeks discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-197631
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 30, 2020
- Raw hash
- 7de1c0e95de4ba5fca4fff7530f1237da34af6c27c5ae0d4ac4ce5df2a943cbd
Reporting entity
- Name
- Valley Presbyterian Hospitalnorm: valley presbyterian hospital
- Domain
- valleypres.org
Victim entity
- Name
- Valley Presbyterian Hospitalnorm: valley presbyterian hospital
- Domain
- valleypres.org
Incident
- Discovered
- Jul 31, 2020
- Materiality determined
- —
- Notification sent
- Jul 31, 2020
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- notifying state and federal regulators
- Third party
- via Blackbaud, Inc.
- Initial access
- supply_chain
Compliance
- Time to disclose
- 22 weeks(152 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 0d
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 31, 2020→ Notified: Jul 31, 20200d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.