Lawrence + Memorial Hospital announces Blackbaud breach
Tuesday, October 13, 2020
New London, CT (Oct. 13, 2020) – Lawrence + Memorial Hospital (L+M) today announced that it is among the large number of organizations affected by a Blackbaud data breach. Blackbaud is a software company the hospital has long used for donor communications and engagement.
Unfortunately, the occurrence and sophistication of cybercrimes has increased significantly in recent years. This particular breach was part of a global security incident that affected many of Blackbaud’s 35,000 worldwide clients. L+M was notified by Blackbaud on August 14, 2020 that an unauthorized party had removed non-financial information as part of a ransomware attack on Blackbaud systems at some point between February 7 and May 20, 2020. Yale New Haven Health System (YNHHS) immediately undertook an extensive internal investigation to determine what information was potentially exposed and which people were affected.
Blackbaud made a payment in response to a demand from the outside party. Blackbaud has been assured that all data were destroyed and they do not believe any information has been disseminated in any manner. However, L+M has not yet been able to independently validate that assurance. In the meantime, L+M will review its relationship with Blackbaud.
Certain demographic information such as names, addresses, phone numbers, dates of birth and philanthropic history were included in the Blackbaud databases subject to the incident. There is also a small subset of the population where financial information may have been exposed. Those people are being notified directly and offered complimentary credit monitoring service. Additionally, there may have been a small number of individuals with information related to the name of an individual’s doctor or dates of service at the hospital. As this cyberattack was on Blackbaud’s system, the attackers never, at any time, had access to the Yale New Haven Health’s electronic medical record system.
Lawrence + Memorial Hospital truly regrets any inconvenience this has caused. As a premier healthcare provider, we strive to demonstrate respect for patients and our community and to always safeguard that information. Letters have been mailed to all those whose information was involved in this incident and if anyone has any concern, they can call 888-479-3575.
Additional information related to the Blackbaud breach can be found here https://www.blackbaud.com/securityincident.
Yale New Haven Health continues to investigate if any other hospitals in our health system were affected and will share that information as soon as it is available.
Lawrence + Memorial Hospital, a member of Yale New Haven Health, is a non-profit, 280-bed general and acute care hospital providing patient care to medical, surgical, pediatric, psychiatric and obstetrical patients in southeastern Connecticut and southern Rhode Island since 1912. Lawrence + Memorial offers cardiac acute, step-down and rehabilitation programs and is the only eastern Connecticut hospital that performs emergency and elective angioplasty. www.lmhospital.org
New Haven and Uncasville, CT (Nov. 3, 2020) – Two of the state’s largest employers are partnering together for the betterment of healthcare in southeastern Connecticut.
New Haven, CT (Oct. 29, 2020) – Yale New Haven Health CEO Marna P. Borgstrom was named B’nai B’rith’s Charles Lauer National Healthcare Award winner for her dedication to community service, excellence in leadership and outstanding philanthropic commitment in the healthcare community and beyond.
New London, CT (Oct. 2, 2020) – James E. Mitchell, PhD, was recently named chairman of the Board of Directors of L+M Healthcare and Lawrence + Memorial Hospital, succeeding B. Michael Rauh. Mitchell has served on the hospital board since 2013, most recently as secretary.