MalwareHealthcareHealthcareRansomwareData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)PIILowContained

Valley Presbyterian Hospital

bd_b3a1e8ac88aee0f7 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 31, 2020

Filed

Dec 30, 2020

To disclose

22 weeks

Affected

Not disclosed

Confidence

66%

Full breach record for Valley Presbyterian Hospital →

Valley Presbyterian Hospital Foundation notified California residents of a data breach stemming from a ransomware attack on its third-party vendor, Blackbaud, Inc. The incident occurred between May 14 and May 20, 2020, involving encryption and exfiltration of data. Valley Presbyterian became aware of the incident on July 31, 2020. Affected data includes names and other personal information. The organization is providing 12 months of complimentary credit monitoring via TransUnion.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 78 days

discovery → filing · 22 weeks / 152 days

May 14, 2020

Begins

Jul 31, 2020

Discovered

Dec 30, 2020

Filed

vs. sector median

+11 wks slower

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Valley Presbyterian Hospital
norm: valley presbyterian hospital
Domain: valleypres.org

Name: Valley Presbyterian Hospital
norm: valley presbyterian hospital
Domain: valleypres.org
Industry: Healthcarellm

Discovered: Jul 31, 2020
Breach occurred: May 14, 2020 – May 20, 2020
Undetected for: 78 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)PII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Regulator citations: Notifying state and federal regulators, as required
Third party: via Blackbaud, Inc.
Initial access: supply_chain

During the incident: Immediately commenced an investigation to better understand the nature and scope of the incident
Working diligently to gather further information from Blackbaud to understand the scope of the incident
Providing complimentary credit monitoring through the services of TransUnion for twelve months
Notifying state and federal regulators, as required
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 weeks(152 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-197631
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 30, 2020
Raw hash: 7de1c0e95de4ba5fca4fff7530f1237da34af6c27c5ae0d4ac4ce5df2a943cbd

Reporting entityValley Presbyterian Hospital

Victim entityValley Presbyterian Hospital

Incidentdiscovered Jul 31, 2020

Stated responseImmediately commenced an investigation to better understand the nature and scope of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov