Joslin Diabetes Center

Joslin Diabetes Center reported a data breach to the Montana Attorney General. The breach was reported on 2020-09-20. The breach occurred from 5/14/2020 to 5/20/2020. 20 Montana residents were affected.

Joslin Diabetes Center, a health sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2020-08-20 and filed notice on 2020-09-18. 1,212 Washington residents were affected. 29 days elapsed between awareness and notification. 195 days to identify the breach. 0 days to contain the breach.

Joslin Diabetes Center notified individuals of a ransomware incident affecting third-party vendor Blackbaud, Inc. discovered by Blackbaud in May 2020. A cybercriminal may have accessed or exported donor/patient data including names, dates of birth, treatment dates and locations, and physician names. Financial account information and SSNs were not involved. Approximately 1,453 Rhode Island residents were potentially affected.

Joslin Diabetes Center reported to HHS on 2020-09-14 a Hacking/IT Incident affecting 71,160 individuals. A business associate experienced a ransomware attack affecting electronic protected health information (ePHI) located on a network server. The ePHI included names, addresses, email addresses, gender, dates of birth, and treatment information. The Center notified HHS, affected individuals, and the media.