Sheltering Arms Notifies Individuals of Blackbaud Cyber Security Incident
Sheltering Arms recently learned that Blackbaud, Inc. (“Blackbaud”), a third-party vendor that hosts our fundraising database, was the target of a cyber security incident. This incident impacted thousands of healthcare organizations across the country and Sheltering Arms was one of them. Sheltering Arms takes the protection and security of our donors’ personal information seriously. We have notified all individuals impacted by this event.
On July 16, 2020, Blackbaud notified Sheltering Arms that it was the subject of a ransomware attack that occurred at some point between February 7, 2020 and May 20, 2020. Financial and credit card account information was encrypted, and therefore not accessed by the unauthorized individual. Social Security numbers were not in the data shared with Blackbaud. Also, this incident did not involve any access to patient diagnosis or treatment plans in Sheltering Arms’ electronic health records.
Blackbaud discovered the attack and was able to stop it, but not before the unauthorized individual was able to access Blackbaud’s systems and remove a backup file containing Sheltering Arms’ donor information. This information may have included a donor’s name, date of birth, spouse’s name, phone number, email address, mailing address, donor history, the Sheltering Arms facility(ies) at which a donor received care, and the year(s) in which a donor received care.
After a thorough investigation involving law enforcement, Blackbaud has informed us that there is no reason to believe any data went beyond the cybercriminal, was or will be misused, or will be disseminated or otherwise made available publicly.
Based on the information we have at this time, we continue to believe that our donors do not need to take any additional action to protect their information. However, those impacted should remain vigilant and promptly report any suspicious activity to law enforcement. Individuals can also contact the Federal Trade Commission at 1-877-ID-THEFT (1-877-438-4338); TTY: 1-866-653-4261 or visit www.ftc.gov/idtheft/ for more information on protecting their identity.
To reduce the likelihood of any repeat occurrence, we are examining the way in which we use the Blackbaud database and evaluating their security safeguards. We are available for additional information as well as any questions those impacted may have at blackbaudinfo@shelteringarms.com.
About Sheltering Arms
Sheltering Arms helps people find the Power to Overcome the obstacles of illness and injury with a complete range of physical rehabilitation and wellness services. To learn more about Sheltering Arms’ outpatient clinics throughout central Virginia, explore our website, call 1-877-56-REHAB, or connect with Sheltering Arms on social media.
###