争议事件

品牌回应

• 整改 — Alina Lodge

  Patients will receive free access to credit monitoring and identity protection services.

来源摘录

• Patients will receive free access to credit monitoring and identity protection services.

• As such, the attackers likely accessed personal data, such as names, contact details, admission and discharge dates, and other treatment details, like recovery status and diagnoses.

• On April 19, 2021, Blackbaud informed the Hardwick Township, N.J.-based Alina Lodge that its data had been exposed during the attack.

来源摘录

• Blackbaud, which suffered a data breach of its customers’ data in a ransomware attack in 2020, in which it admitted paying the ransom in a double extortion attack, is facing multiple class action cases following the attack.

• The federal judge overseeing the cases has refused to dismiss all of the claims that the plaintiffs alleged against Blackbaud, and ruled that Blackbaud must face claims of violation of the California Consumer Privacy Act (CCPA), deceptive and unfair trade practice allegations made by Florida and New York plaintiffs, and a separate claim by a California plaintiff alleging the compromise of medical information.

品牌回应

• 持续披露 — UMass Memorial

  The hospital said it is mailing letters to patients advising them of a "data security incident" involving Blackbaud Inc.

• 整改 — UMass Memorial

  UMass Memorial said it has established a dedicated call center to answer any questions about this incident: (888)-604-0288.

来源摘录

• In July, Blackbaud informed UMass Memorial it found an unauthorized individual gained access to Blackbaud's systems between Feb. 7 and May 20.

• UMass Memorial Medical Center announced Monday a vendor that handles donor and fundraising data for the hospital experienced a security breach earlier this year.

• This incident did not affect all UMass Memorial patient information, UMass Memorial said in a press release Monday; it was limited to its donor and fundraising database and did not involve any access to medical systems or electronic health records.

品牌回应

• 调查 — Northern Light Health

  Northern Light Health said its investigation indicates that patient names, addresses, phone numbers, email addresses, date of birth, the hospital where the patient was treated, date of treatment and possibly the department where the patient was treated might have been stolen from Blackbaud.

来源摘录

• The attack, which began in February and was detected by Blackbaud in May, affected thousands of organizations, including nonprofits in Maine.

• Northern Light Health said its investigation indicates that patient names, addresses, phone numbers, email addresses, date of birth, the hospital where the patient was treated, date of treatment and possibly the department where the patient was treated might have been stolen from Blackbaud.

• Northern Light said it notified the federal Department of Health and Human Services of the data breach because it involved personal health care information

品牌回应

• 持续披露 — NorthShore University HealthSystem

  NorthShore recently sent a letter to those affected saying information including their full names, birth dates, addresses, phone numbers, doctors’ names, doctors’ offices and dates of admission and discharge may have been exposed.

来源摘录

• The Blackbaud breach was the result of a ransomware attack, in which cybercriminals attempt to lock companies out of their own data and servers and demand ransom in order to restore access, Blackbaud said in a statement on its website. Blackbaud discovered the attack in May. NorthShore learned of the breach July 22, according to the hospital’s letter.

• NorthShore University HealthSystem said the personal information of about 348,000 people may have been exposed in a breach involving one of the health system’s vendors earlier this year.

• NorthShore recently sent a letter to those affected saying information including their full names, birth dates, addresses, phone numbers, doctors’ names, doctors’ offices and dates of admission and discharge may have been exposed.

品牌回应

• 持续披露 — OSF HealthCare

  OSF HealthCare System ("OSF") is mailing letters to its patients advising them of a data security incident

• 调查 — OSF HealthCare

  On August 20, 2020, OSF's investigation and review of the Blackbaud database involved in the incident determined that it contained some patient information

• 整改 — OSF HealthCare

  OSF is assessing the security safeguards at Blackbaud and evaluating the data elements stored on the Blackbaud systems.

来源摘录

• This incident did not involve any access to OSF's medical systems or electronic health records.

• Blackbaud advised that the unauthorized individual may have acquired backup copies of databases used by its customers, including a backup of the database OSF uses for fundraising efforts.

• Blackbaud notified its customers it discovered that an unauthorized individual gained access to Blackbaud's systems between February 7 and May 20, 2020.

来源摘录

• The cybercriminal removed some data, but the company clarified that the entity did not access credit card information, bank account information or social security numbers.

• In a statement posted on its website in July, Blackbaud says it "discovered and stopped a ransomware attack" in May.

品牌回应

• 调查 — OSF HealthCare

  “OSF is assessing the security safeguards at Blackbaud and evaluating the data elements stored on the Blackbaud systems,” OSF said in a news release.

来源摘录

• The breach at software company Blackbaud, which happened between Feb. 7 and May 20, exposed patient information such as names, addresses, phone numbers, email addresses, birthdays, treatment facilities and treating physicians.

• “OSF is assessing the security safeguards at Blackbaud and evaluating the data elements stored on the Blackbaud systems,” OSF said in a news release.

品牌回应

• 持续披露 — Nuvance Health

  which is mailing letters to patients advising them of a data security incident

来源摘录

• That’s according to a release from organization, which is mailing letters to patients advising them of a data security incident that involved Blackbaud, a third-party vendor that provides services on behalf of Nuvance.

• Patients of Nuvance Health may have had their information exposed due to a security breach between February and May.

• It’s believed that names, contact information, ages, gender, dates of birth, admission dates, departments of treatment, treating physicians and health insurance statuses were among the information affected, Nuvance announced.

来源摘录

• No credit card information, social security numbers or bank account information was taken, Blackbaud said.

• Before the hacker was removed from the system, they secured a copy of data.

• The NonProfit Times reported the attack happened in February. Blackbaud noticed the attack in May, and independent forensics experts and law enforcement helped stop the hacker.