MalwareHealthcareHealthcareRansomwareSupply Chain (3P Vendor)Data ExfiltratedRansom DemandedRansom PaidCustomer Data InvolvedPHIHealth (basic)Identity (basic)LowContained

Beebe Medical Center

bd_dafa7a1c267cbd93 · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 2, 2020

Filed

Dec 24, 2020

To disclose

22 days

Affected

Not disclosed

Confidence

65%

Full breach record for Beebe Medical Center →3 incidents on file

Beebe Medical Center notified Delaware AG of a ransomware attack on its third-party cloud provider, Blackbaud, Inc. The attack occurred between Feb 7 and May 20, 2020. Beebe discovered its data was in the impacted database on Dec 2, 2020. The attacker encrypted data and demanded ransom, which Blackbaud paid. Beebe's data included names, DOBs, clinician names, visit dates, and departments. No SSNs or financial data were impacted. Beebe engaged forensic experts and Blackbaud implemented enhanced security controls.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 299 days

discovery → filing · 22 days

Feb 7, 2020

Begins

Dec 2, 2020

Discovered

Dec 24, 2020

Filed

vs. sector median

9 wks faster

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Beebe Medical Center
norm: beebe medical center

Name: Beebe Medical Center
norm: beebe medical center
Industry: Healthcarellm

Discovered: Dec 2, 2020
Breach occurred: Feb 7, 2020 – May 20, 2020
Undetected for: 299 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 15, 2021
Affected individuals: Not disclosed
Data types: Identity (basic)Health (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Third party: via Blackbaud, Inc.
Initial access: supply_chain

During the incident: Undertook an in-depth investigation with the assistance of independent forensic experts
Obtained a copy of the impacted data from Blackbaud for further investigation
Paid a demand to the attacker
Obtained confirmation that the compromised information had been destroyed
Changes made: Enhancements to access management
Network segmentation
Deployment of additional endpoint and network-based platforms
Expanded use of encryption technologies
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 days(22 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2021/01/Beebe-Medical-Center-Ad-r1prf.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 24, 2020
Raw hash: d2c89b4c28862f9294a32cee789ef09a7249cdc69ce519784c787ebbbf6a4716

Reporting entityBeebe Medical Center

Victim entityBeebe Medical Center

Incidentdiscovered Dec 2, 2020

Stated responseUndertook an in-depth investigation with the assistance of independent forensic experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceattorneygeneral.delaware.gov