Lawrence + Memorial Hospital

Lawrence + Memorial Hospital (Yale New Haven Health) notified NH AG of a Blackbaud ransomware breach affecting 97 NH residents. Attack occurred Feb-May 2020. Data included names, addresses, DOB, philanthropic history, provider names, dates of service, and one credit card number. Vendor Blackbaud paid ransom; data destroyed. Notifications sent Oct 13, 2020.

Lawrence + Memorial Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-10-16. 489 Massachusetts residents were affected. The report records the breach type as electronic.

Lawrence + Memorial Hospital (CT) reported to HHS OCR on 2020-10-13 that its business associate experienced a ransomware attack affecting the ePHI of 21,617 individuals. Breached information was located on a Network Server. Exposed ePHI included names, addresses, dates of birth, email addresses, Social Security numbers, telephone numbers, financial information, and treatment information. The CE notified HHS, affected individuals, and the media, provided substitute notice, and offered complimentary credit monitoring to affected individuals.