Saint Luke's Foundation

Saint Luke's Foundation notified individuals that a third-party vendor, Blackbaud, experienced a ransomware attack between Feb 7 and May 20, 2020. The cybercriminal exfiltrated a backup file containing patient demographic data (name, address, phone, email, DOB) and limited medical information (date of service, department of care). No SSNs or financial data were compromised. Blackbaud contained the incident and is monitoring for misuse.

Saint Luke's Foundation (MO) reported to HHS on 2020-08-20 that its business associate, Blackbaud, Inc., experienced a ransomware attack affecting the ePHI of approximately 360,212 patients. Exposed information included names, addresses, dates of birth, telephone numbers, email addresses, and treatment information. Breached information located on a Network Server. The CE notified HHS, affected individuals, the media, and provided substitute notice.

Saint Luke's Foundation notified Montana AG of a ransomware incident involving third-party vendor Blackbaud. Attack occurred Feb 7 - May 20, 2020. Compromised data included patient demographics, contact info, DOB, and limited medical info. No SSN or financial data accessed. Blackbaud contained the incident and deleted the backup file.