DisclosureLens
MalwareEducationEducationRansomwareCapture Stored DataRansom DemandedRansom PaidData ExfiltratedMulti-Stage ChainTargetedSupply Chain (3P Vendor)Identity (basic)EmploymentEducationFinancialMediumActive

Southern New Hampshire University

bd_016ac237726b5080 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 16, 2020

Filed

Aug 24, 2020

To disclose

6 weeks

Affected

1,826state residents only

Confidence

69%
Full breach record for Southern New Hampshire University →6 incidents on file

Southern New Hampshire University notified Washington AG of a third-party vendor (Blackbaud) ransomware incident. Attackers accessed a backup file containing PII of 1,826 WA residents between Feb 7 and May 20, 2020. SNHU was notified July 16, 2020. Ransom was paid for data destruction. Data included names, DOB, contact info, employment, education, and donation history.

Washington clock⏱ WA AG >30d6 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 160 days
discovery → filing · 6 weeks / 39 days

Feb 7, 2020

Begins

Jul 16, 2020

Discovered

Aug 24, 2020

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,826 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.