Emanate Health Foundation

Emanate Health Foundation notified California residents of a ransomware attack on its third-party provider Blackbaud. The cybercriminal accessed a Foundation backup file hosted on Blackbaud's servers between February 7, 2020 and May 20, 2020, exfiltrating data including names, addresses, birthdates, gender, phone numbers, emails, and hospital department locations. No SSNs, credit card, or bank account data were involved.

Emanate Health reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-07-31. 2 Massachusetts residents were affected. The report records the breach type as electronic.

Emanate Health notified employees of a data breach involving third-party vendor PaperlessPay Corporation. An unauthorized individual accessed PaperlessPay's SQL server on February 18, 2020, potentially viewing employee data including names, addresses, Social Security numbers, and partial bank account numbers. PaperlessPay discovered the incident on February 19, 2020, after DHS contact. The vendor shut down servers, cooperated with DHS/FBI, and rebuilt infrastructure. Emanate Health offered 12 months of credit monitoring.

Emanate Health reported a data breach to the Indiana Attorney General. The breach occurred on 2020-02-19 and was reported on 2020-07-29. 3 Indiana residents were affected. 7,457 individuals affected in total.