The most recent incident affected by the Blackbaud data breach to be made public is that of Greenwich Hospital , a medical facility in Connecticut, United States.
Blackbaud is a cloud computing, best known for its SQL database software Raiser's Edge, which is used for fundraising. The New York-based company has 35,000 customers worldwide.
Greenwich Hospital, which is part of the Yale New Haven, said it was notified by Blackbaud on Aug. 12 about a ransomware attack that took place on the company's systems between Feb. 7 and May 20. The incident exposed non-financial data.
Greenwich Hospital said that while Blackbaud software is used to communicate and interact with donors, no confidential data in this incident, although “specific demographic information” including donor names, contact information and charitable history, along with some medical appointment schedules, was compromised. This data is part of the Blackbaud databases that were subject to the breach.
“Blackbaud paid the ransom in response to a request from the malicious actor,” the hospital said in a press release. “Blackbaud has assured us that all data has been destroyed and does not believe any information has been released in any way. However, Greenwich Hospital has not yet been able to independently verify this assurance.”.
Meanwhile, Greenwich Hospital will review its relationship with Blackbaud. The hospital is the third medical center in the region to publicly announce a data breach involving its operations, following similar announcements made by St. Vincent Medical Center of Bridgeport and White Plains Hospital.
