FRANCISCAN HEALTH FOUNDATION, INC.

Franciscan Health Mooresville reported a data breach to the Indiana Attorney General. The breach occurred on 2022-06-12 and was reported on 2022-07-22. 1 Indiana residents were affected.

Franciscan Health Foundation, Inc. reported a ransomware attack targeting its third-party vendor, Blackbaud, affecting approximately 11,040 individuals (including 7 New Hampshire residents). The incident occurred between February 7, 2020, and May 20, 2020. Exposed data included names, addresses, phone numbers, check images, financial account numbers, emails, dates of birth, and donor history. Blackbaud paid a ransom and confirmed data destruction. The Foundation notified the NH Attorney General on November 12, 2020, and began notifying affected individuals on November 13, 2020, offering one year of credit monitoring and identity theft protection.

Franciscan Health Foundation, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-11-13. 27 Massachusetts residents were affected. The report records the breach type as electronic.

Franciscan Health Foundation notified Montana residents of a third-party data breach involving Blackbaud, a fundraising software vendor. The ransomware attack occurred between Feb 7 and May 20, 2020, exposing donor PII and financial data. Blackbaud paid the ransom and destroyed data copies. Affected data included names, addresses, phone numbers, check images, and financial account numbers. First Watch identity theft protection was offered.

FRANCISCAN HEALTH FOUNDATION, INC filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-494). The register records the breach as discovered on February 7, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

FRANCISCAN HEALTH FOUNDATION filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-294). The register records the breach as discovered on February 7, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.