OneBlood Restores Systems After July 29 Ransomware Attack Disrupts Blood Supply Operations OneBlood, a nonprofit blood donation center serving hospitals across the southeastern U.S., is gradually recovering from a ransomware attack that crippled its systems on July 29. The organization announced on August 5 that critical software is back online in a reduced capacity, with manual labeling of blood products and electronic donor registration resuming. Full automation is expected to return in the coming days, though the attack has strained blood supplies amid an urgent need for O positive, O negative, and platelet donations, particularly as a tropical storm approaches Florida. The incident forced OneBlood to activate critical blood shortage protocols across its 250+ partner hospitals, prompting support from other blood centers and the AABB Disaster Task Force to replenish inventory. While operations remain limited, the organization is collaborating with cybersecurity experts and government officials to investigate the breach. It has not confirmed whether donor data including medical histories, test results, or blood types was compromised. OneBlood emphasized its rapid response to the attack, stating that security teams are working to restore full functionality. The nonprofit continues to prioritize maintaining blood supply levels while navigating the recovery process.

OneBlood Inc. experienced a data breach between July 14–29, 2024, where an unauthorized third party accessed or potentially accessed private information of current/former employees and blood donors. The exposed data led to a class action lawsuit, alleging OneBlood failed to adequately protect sensitive information. The company agreed to a $1 million settlement, offering affected individuals up to $2,500 for documented losses (e.g., fraud-related bank fees, credit monitoring costs, legal fees) or a flat $60 payment for undocumented claims. The breach triggered financial and reputational harm, with victims facing risks of identity theft, fraud, and privacy violations. OneBlood denied negligence but settled to avoid prolonged litigation. The incident underscores vulnerabilities in handling employee and donor data, with long-term trust and operational impacts.