Saint Luke's Foundation

Disclosed Aug 20, 2020360,212 affectedConfirmed

The covered entity (CE), Saint Luke’s Foundation, reported that its business associate (BA), Blackbaud, Inc., experienced a ransomware attack affecting the electronic protected health information (ePHI) of approximately 360,212 of its patients. The ePHI involved included names, addresses, dates of birth, telephone numbers, email addresses, and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice.

What is known

People affected	360,212 (as reported to HHS)
Disclosed	Aug 20, 2020
Happened	Feb 7, 2020
Attack	Hacking
Data exposed	NamesHealth
Sector	Nonprofit · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Saint Luke's Foundation

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Saint Luke's Foundation (Healthcare Provider, MO)

Notices filed

Residents of CAAug 20, 2020

California AGCount not stated

TotalAug 20, 2020

HHS archive360,212 people

History of this record

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 360212by backfillSource

summary2026-09-25

empty to The covered entity (CE), Saint Luke’s Foundation, reported that its business associate (BA), Blackbaud, Inc., experienced a ransomware attack affecting the electronic protected health information (ePHI) of approximately 360,212 of its patieby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Saint Luke's Foundation