Notice of a Privacy Incident

On July 16, 2020, Blackbaud, Inc. (“Blackbaud”), a vendor that provides Northwestern Memorial HealthCare (NMHC) and many other organizations cloud based fundraising database management, reported an unauthorized individual gained access to Blackbaud’s systems between February 7, 2020 and May 20, 2020. The individual may have acquired a backup of the database which includes donor or patient information for whom donations were made, including names, age, gender, dates of birth, medical record number, dates of service, departments of service, treating physicians, and/or limited clinical information.

Based on the nature of the incident and its investigation, Blackbaud has no reason to believe that any of the data involved was or will be misused or will be made available publicly. This incident was not targeted at NMHC and did not involve access to NMHC’s electronic medical record system. Except for five individuals, Social Security numbers, financial accounts and payment card information were encrypted, and not able to be accessed by the unauthorized individual.

We are committed to protecting the security and privacy of our donors and patients. We value our donors’ privacy and we deeply regret that this incident took place. We have established a dedicated call center, which may be contacted for more information about this incident at (888) 498-0918, Monday through Friday, from 8 am to 5 pm CST. We recommend that you review the statements you receive from your healthcare providers. If you see services you did not receive, please contact the provider immediately.

To help prevent this from happening again, NMHC is reviewing its third-party data base storage vendors and its relationship with Blackbaud.