Yale New Haven Hospital announces Blackbaud breach
Friday, October 30, 2020
New Haven, CT (Oct. 30, 2020) – Yale New Haven Hospital (YNHH) today announced that it is among the large number of organizations affected by a Blackbaud data breach. Blackbaud is a software company the hospital has long used for donor communications and engagement.
Unfortunately, the occurrence and sophistication of cybercrimes has increased significantly in recent years. This particular breach was part of a global security incident that affected many of Blackbaud’s 35,000 worldwide clients. YNHH was notified by Blackbaud on Sept. 1, 2020 that an unauthorized party had removed non-financial information as part of a ransomware attack on Blackbaud systems at some point between February 7 and May 20, 2020. Yale New Haven Health System (YNHHS) immediately undertook an extensive internal investigation to determine what information was potentially exposed and which people were affected.
Blackbaud made a payment in response to a demand from the outside party. Blackbaud has been assured that all data were destroyed and they do not believe any information has been disseminated in any manner. However, YNHH has not yet been able to independently validate that assurance. In the meantime, YNHH will review its relationship with Blackbaud.
Certain demographic information such as names, addresses, phone numbers, dates of birth and philanthropic history were included in the Blackbaud databases subject to the incident. There is also an extremely small subset of the population where financial information may have been exposed. Those people are being notified directly and offered complimentary credit monitoring service. Additionally, there may have been a small number of individuals with information related to the name of an individual’s doctor or dates of service at the hospital. As this cyberattack was on Blackbaud’s system, the attackers never, at any time, had access to the Yale New Haven Health’s electronic medical record system.
Yale New Haven Hospital truly regrets any inconvenience this has caused. As a premier healthcare provider, we strive to demonstrate respect for patients and our community and to always safeguard that information. Letters have been mailed to all those whose information was involved in this incident and if anyone has any concern, they can call 888-479-3575.
Additional information related to the Blackbaud breach can be found here https://www.blackbaud.com/securityincident.
Yale New Haven Health continues to investigate if any other hospitals in our health system were affected and will share that information as soon as it is available.
Yale New Haven Hospital (YNHH), part of Yale New Haven Health, is a nationally recognized, 1,541-bed, not-for-profit hospital serving as the primary teaching hospital for the Yale School of Medicine (YSM). Founded as the fourth voluntary hospital in the U.S. in 1826, today, YNHH has two New Haven-based campuses, and also includes Yale New Haven Children's Hospital, Yale New Haven Psychiatric Hospital and Smilow Cancer Hospital. YNHH has received Magnet designation from the American Nurses Credentialing Center, the nation’s highest honor of nursing excellence. YNHH has a combined medical staff of about 4,500 university and community physicians practicing in more than 100 specialties. www.ynhh.org
New Haven, CT (April 23, 2021) – Yale New Haven Health (YNHHS) reached a significant milestone, having conducted one million COVID-19 tests across the health system.
New Haven (March 24, 2021) – Yale New Haven Hospital (YNHH) has been honored by Best Workplaces for Commuters (BWC) as one of the nation’s top employers for commuters for the tenth year in a row.
New Haven, CT (March 8, 2021) – The Structural Heart Program at Yale New Haven Hospital (YNHH) Heart and Vascular Center has received Transcatheter Valve Certification from the American College of Cardiology (ACC).