Northern Light Health

Northern Light Health notified individuals of a ransomware attack on its third-party vendor, Blackbaud, Inc., in May 2020. The attack resulted in the exfiltration of limited protected health information, including names, addresses, dates of birth, and medical service details. Blackbaud paid the ransom. Northern Light Health notified HHS and established a call center for affected individuals.

Northern Light Health notified Montana and other residents of a third-party vendor (Blackbaud) ransomware incident. The attack occurred in May 2020; Northern Light Health was notified on July 16, 2020. Data involved included names, addresses, DOB, gender, and limited PHI. Ransom was paid by Blackbaud. No credit card data was accessed. Total affected count not explicitly stated for Montana; 487 Rhode Island residents identified.

Northern Light Health reported to HHS on 2020-08-03 a Hacking/IT Incident affecting 304,399 individuals. Breached information located on Network Server, Other. The covered entity's business associate experienced a ransomware attack affecting ePHI including names, addresses, and dates of birth. The CE notified HHS, affected individuals, the media, and provided substitute notice.

NORTHERN LIGHT HEALTH filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-388). The register records the breach as discovered on September 14, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

NORTHERN LIGHT HEALTH filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-358). The register records the breach as discovered on May 14, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.