On July 16, 2020, Augusta Health Foundation received notification from Blackbaud, Inc. that it was one of the hundreds of international clients impacted by a ransomware cyber incident. Blackbaud provides information management and financial tools to many organizations around the world, including the Augusta Health Foundation.
Blackbaud advised the Augusta Health Foundation that it had experienced a ransomware incident in May, 2020 that encrypted Blackbaud's systems, and that an unknown entity may have accessed customer data before May 20, 2020. No personal financial information such as credit card numbers, bank account information, or identification numbers were affected by this incident.
After this notification, an internal investigation was conducted to determine if any sensitive information of Augusta Health Foundation donors was involved. Augusta Health found that the Blackbaud database contains names, addresses, phone numbers (if provided), email addresses (if provided), location of services at Augusta Health, attending physician and dates of discharge.
To date, we have not received any indication from Blackbaud that the information of Augusta Health Foundation donors was specifically accessed or acquired by this unknown entity. Although the Augusta Health Foundation has no evidence to suggest any actual or attempted misuse of information as a result of this incident, as a general practice, we encourage individuals to remain vigilant against incidents of identity theft and fraud and to review account statements for suspicious activity. If discovered, you should contact your financial institution immediately.
As confidentiality, privacy and security of information are among our greatest priorities, Augusta Health and the Augusta Health Foundation have taken this incident seriously. We are actively reviewing policies regarding third-party vendors and are requiring Blackbaud to evaluate additional safeguards to prevent similar incidents in the future. We are notifying the US Department of Health and Human Services of this event and have mailed a personal letter to Augusta Health Foundation donors who were included in the incident. A copy of this notice is available on our website at https://www.augustahealth.com/foundation/blackbaud-statement. For more information about this incident, you may also contact our dedicated assistance line at 1-(866) 925-2028 between the hours of 9:00 am and 6:30 pm (EST).
Augusta Health and Augusta Health Foundation regret any inconvenience or concern this third-party incident may have caused. We wish to reassure the community we consider our commitment to maintaining the integrity of protected health information paramount.