Joslin Diabetes Center data breach (2020)

MASSACHUSETTSHHS OCRFirst filinglinked via same-victim cross-source · 100%

Filed Sep 14, 2020bd_343d44bb8a8b8341

Joslin Diabetes Center reported to HHS on 2020-09-14 a Hacking/IT Incident affecting 71,160 individuals. A business associate experienced a ransomware attack affecting electronic protected health information (ePHI) located on a network server. The ePHI included names, addresses, email addresses, gender, dates of birth, and treatment information. The Center notified HHS, affected individuals, and the media.

Affected (this filing): 71,160

🌲Washington State AGlinked via same-victim cross-source · 100%

🐻California State AGlinked via same-victim cross-source · 100%

Filed Sep 18, 2020bd_d9d141ecb103bdb8

Joslin Diabetes Center notified individuals of a ransomware incident affecting third-party vendor Blackbaud, Inc. discovered by Blackbaud in May 2020. A cybercriminal may have accessed or exported donor/patient data including names, dates of birth, treatment dates and locations, and physician names. Financial account information and SSNs were not involved. Approximately 1,453 Rhode Island residents were potentially affected.

Affected (this filing): 1,453

🦬Montana State AGlinked via multistate filing link · 100%

Filed Sep 20, 2020bd_d1383f627c2dcb20

Joslin Diabetes Center reported a data breach to the Montana Attorney General. The breach was reported on 2020-09-20. The breach occurred from 5/14/2020 to 5/20/2020. 20 Montana residents were affected.

Affected (this filing): 20

Joslin Diabetes Center

Litigation Timing

Affected residents by state

Timeline