Saint Luke's Foundation

Saint Luke's Foundation reported a ransomware incident involving third-party vendor Blackbaud. The attack occurred between Feb 7 and May 20, 2020, resulting in the encryption and exfiltration of a backup file containing patient demographics, contact info, DOB, and limited medical data. Blackbaud contained the threat, deleted the file, and implemented security hardening. No SSNs or financial data were compromised. Rhode Island residents were specifically noted as potentially impacted.

Saint Luke's Foundation (MO) reported to HHS on 2020-08-20 that its business associate, Blackbaud, Inc., experienced a ransomware attack affecting the ePHI of approximately 360,212 patients. Exposed information included names, addresses, dates of birth, telephone numbers, email addresses, and treatment information. Breached information located on a Network Server. The CE notified HHS, affected individuals, the media, and provided substitute notice.

Affected (this filing): 360,212

Saint Luke's Foundation reported a data breach to the Montana Attorney General. The breach was reported on 2020-08-20. The breach occurred from 2/7/2020 to 5/20/2020. 62 Montana residents were affected.

Affected (this filing): 62