OneBlood: OneBlood hit with ransomware attack; state of donors' data unknown

OneBlood Restores Systems After July 29 Ransomware Attack Disrupts Blood Supply Operations

OneBlood, a nonprofit blood donation center serving hospitals across the southeastern U.S., is gradually recovering from a ransomware attack that crippled its systems on July 29. The organization announced on August 5 that critical software is back online in a reduced capacity, with manual labeling of blood products and electronic donor registration resuming. Full automation is expected to return in the coming days, though the attack has strained blood supplies amid an urgent need for O positive, O negative, and platelet donations, particularly as a tropical storm approaches Florida.

The incident forced OneBlood to activate critical blood shortage protocols across its 250+ partner hospitals, prompting support from other blood centers and the AABB Disaster Task Force to replenish inventory. While operations remain limited, the organization is collaborating with cybersecurity experts and government officials to investigate the breach. It has not confirmed whether donor data including medical histories, test results, or blood types was compromised.

OneBlood emphasized its rapid response to the attack, stating that security teams are working to restore full functionality. The nonprofit continues to prioritize maintaining blood supply levels while navigating the recovery process.

Source: https://www.fiercehealthcare.com/digital-health/oneblood-hit-ransomware-attack-state-donors-data-unknown

OneBlood cybersecurity rating report: https://www.rankiteo.com/company/oneblood

"id": "ONE1779373749",
"linkid": "oneblood",
"type": "Ransomware",
"date": "8/2024",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': '250+ partner hospitals, blood '
                                              'donors',
                        'industry': 'healthcare, blood donation',
                        'location': 'southeastern U.S.',
                        'name': 'OneBlood',
                        'type': 'nonprofit'}],
 'customer_advisories': 'urgent need for O positive, O negative, and platelet '
                        'donations due to blood supply strain',
 'data_breach': {'sensitivity_of_data': 'potential compromise of donor data '
                                        'including medical histories, test '
                                        'results, and blood types'},
 'date_detected': '2024-07-29',
 'date_publicly_disclosed': '2024-08-05',
 'description': 'OneBlood, a nonprofit blood donation center serving hospitals '
                'across the southeastern U.S., experienced a ransomware attack '
                'on July 29 that crippled its systems. The organization is '
                'gradually recovering, with critical software back online in a '
                'reduced capacity. The attack strained blood supplies amid an '
                'urgent need for O positive, O negative, and platelet '
                'donations, particularly as a tropical storm approaches '
                'Florida.',
 'impact': {'operational_impact': 'disrupted blood supply operations, forced '
                                  'activation of critical blood shortage '
                                  'protocols',
            'systems_affected': 'critical software systems, electronic donor '
                                'registration, automated labeling of blood '
                                'products'},
 'investigation_status': 'ongoing',
 'references': [{'date_accessed': '2024-08-05',
                 'source': 'OneBlood Announcement'}],
 'response': {'incident_response_plan_activated': 'Yes',
              'recovery_measures': 'collaborating with other blood centers to '
                                   'replenish inventory, prioritizing blood '
                                   'supply maintenance',
              'remediation_measures': 'restoring critical software in reduced '
                                      'capacity, manual labeling of blood '
                                      'products, electronic donor registration',
              'third_party_assistance': 'cybersecurity experts, government '
                                        'officials, AABB Disaster Task Force'},
 'title': 'OneBlood Ransomware Attack Disrupts Blood Supply Operations',
 'type': 'ransomware'}