South Shore Health Addresses Blackbaud Data Security Incident
South Shore Health has begun notifying some of its patients about a data security incident which occurred at its third-party vendor, Blackbaud, Inc. The South Carolina-based company provides customer relationship management and financial services tools for fundraising purposes to thousands of schools, non-profits and health systems across the globe.
Blackbaud notified many of its customers, including South Shore Health, that it discovered a data security incident involving its systems, stating that the unauthorized access occurred between February 7, 2020 and May 20, 2020, and that unauthorized actors acquired backup copies of databases used by its customers – including a database that South Shore Health uses for fundraising efforts.
Once South Shore Health was notified, it immediately took steps to understand the extent of the incident and the data involved. On October 8, 2020, South Shore Health received additional information from Blackbaud which confirmed that some South Shore Health patient information was involved in the incident. Importantly, the incident did not involve any access to South Shore Health’s medical systems or electronic health records.
South Shore Health determined during its own investigation, that the Blackbaud database involved in the incident contained patient names, addresses, spouse names (if applicable), and patient class designations (such as: inpatient, outpatient or emergency department). No Social Security numbers, financial account or credit card information were stored in the Blackbaud database used by South Shore Health; therefore, none of this information was involved in the incident. South Shore Health is now undertaking a review of how its information is stored with Blackbaud and evaluating Blackbaud’s security safeguards.
South Shore Health takes this matter very seriously and regrets any concern or inconvenience it may have caused. If any affected patients receive a communication or a fundraising solicitation from South Shore Health and would like to confirm its validity, please contact the number listed below for verification.
South Shore Health has also established a dedicated call center to answer any questions about this incident which may be reached at 833-971-3243 between the hours of 9 AM and 6:30 PM (Eastern), excluding major U.S. holidays.