Open Accessibility Menu
Hide

Blackbaud Breach Letter

July 31, 2020

To Whom It May Concern,

We are writing to inform you of a data security incident involving Blackbaud, an engagement and fundraising software service provider utilized by Boca Raton Regional Hospital Foundation. We take the protection, proper use and confidentiality of your personal information very seriously and are contacting you as a precautionary measure to explain the incident. It’s important to note that Blackbaud’s breach did not compromise credit card information or bank account information.

In order to provide outstanding patient care and bring the latest treatments to patients and families affected by a serious illness, Boca Raton Regional Hospital is supported by the Boca Raton Regional Hospital Foundation. The Foundation works with grateful patients and community members who may wish to make a donation in order to advance healthcare and wellness efforts. The Foundation uses software from Blackbaud to maintain information on donors and potential donors who may want to philanthropically support our organization. Blackbaud is the premier provider of database services for non-profits, with more than 45,000 clients in over 100 countries.

On July 16, 2020, Blackbaud informed us that they discovered and stopped a “ransomware” attack. The vendor believes that hackers were in the vendor’s systems between February 7, 2020 and May 20, 2020. During this time, hackers obtained a copy of certain information, such as contact information, demographic information, and a history of your relationship with Boca Raton Regional Hospital. As mentioned above, credit card information and bank account information were not compromised. According to Blackbaud, they consulted with the FBI and cybersecurity experts and took steps to make certain the backup file was permanently destroyed.

Based on the nature of the incident, the vendor’s research, and third party (including law enforcement) investigation, we have no reason to believe that any data was or will be misused, or will be disseminated or otherwise made available publicly.Out of an abundance of caution and to maintain transparency, we are nevertheless notifying you of this incident.

At this time, there is no action required on your part. If we learn anything else that leads us to believe that further steps are needed, we will contact you immediately. While we have confidence that the incident has been resolved by the vendor, we will continue to monitor the situation and take additional measures, as appropriate.

We sincerely apologize for any concern or inconvenience this may cause. Thank you for your support and trust in the Boca Raton Regional Hospital Foundation.

Sincerely,

Mark Larkin, CFRE

President, Boca Raton Regional Hospital Foundation