Saint Luke's Foundation experienced a data breach via a ransomware attack executed by a third-party vendor, Blackbaud, between February 7, 2020, and May 20, 2020. The incident involved unauthorized access to limited patient demographic and guarantor information, though no highly sensitive data—such as credit card details, bank account information, or Social Security numbers—was compromised. The exact number of affected individuals remains undisclosed. The breach was reported by the California Office of the Attorney General on August 20, 2020, highlighting the risks associated with third-party vendor vulnerabilities in healthcare data security. While the attack did not result in financial fraud or identity theft, it exposed personal details, raising concerns over patient privacy and trust in the foundation’s data protection measures.