Blackbaud Security Issue
Data Security Notification
Margaret Mary Health Foundation was recently made aware of a data security issue involving one of its third-party vendors, Blackbaud. The Foundation uses Blackbaud’s data platform for fundraising, donor communications and information management.
On July 16, 2020, Blackbaud informed the Foundation, along with its many client fundraising organizations across the globe, of a ransomware attack that occurred in May of 2020 and may have involved the personal information of individuals associated with those clients. In summary, Blackbaud said cybercriminals attacked their systems and copied a subset of data from their databases. The cybercriminals demanded a ransom, which Blackbaud paid in exchange for assurances the copy of the stolen information would be destroyed.
With respect to the Foundation, potentially affected individuals include donors, event attendees or patients of Margaret Mary Health. The information that may have been involved for those individuals includes name, address, telephone number, email address, gender, date of birth, marital status, spouse name, medical record number, donation history, limited notes and publicly available financial data. It is important to note Blackbaud states the cybercriminals did not access any credit card information or bank account information because of security controls they use on this sensitive data. Further, the Foundation does not have social security numbers or any health/medical information from your electronic medical record in its system. Please be assured this matter did not involve our own computer systems or networks in any way.
Margaret Mary Health Foundation has taken this situation seriously since becoming aware of it. It is conducting its own thorough investigation, as well as working with Blackbaud to determine exactly what occurred and what additional protections are being put in place to prevent a similar incident from occurring in the future. The Foundation recommends potentially affected individuals be vigilant and promptly report any suspicious activity or suspected identity theft to law enforcement authorities. Please know Margaret Mary Health Foundation will never solicit sensitive information from you via email or telephone.
Protecting the privacy and security of information is of utmost importance to Margaret Mary Health. If you have any questions about this incident, please call us toll-free at 866-601-3555 between the hours of 8 AM to 5 PM Monday through Friday.
Additional information regarding the security breach can be found here.