Some UK HealthCare donor, patient data may have been accessed in Blackbaud breach

The personal information of thousands of patients and contributors may have been accessed by cybercriminals in a third-party data breach, University of Kentucky HealthCare announced Tuesday.

Blackbaud, a company that UK HealthCare hired for digital data storage “related to donors and philanthropy between 2015 and 2019,” found that a cyberattack allowed hackers to view data about donors that included names, addresses, dates of birth, medical record numbers, admission dates, area of service and attending doctors.

UK HealthCare will notify about 163,000 possibly affected people. The breached information was about donors who were previously patients. Further content of medical records was not accessed. UK HealthCare never provided bank account information or Social Security and credit card numbers to Blackbaud, so that information could not be accessed.

“Protecting the security of information belonging to our donors, patients, and any individuals whose information is entrusted to us is of the utmost importance,” Richard Chapman, UK HealthCare’s chief privacy officer, said in the announcement. “Our health system has strict policies and procedures in place to protect patient information, and we are currently undertaking additional steps to reinforce those measures.”

Read more: https://www.kentucky.com/news/local/article245563810.html