HackingOtherStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedIdentity (basic)Financial accountLowContained

The Elephant Sanctuary in Tennessee

bd_0306167ac2eb6f5f · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Apr 2, 2024

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

66%

Full breach record for The Elephant Sanctuary in Tennessee →2 incidents on file

The Elephant Sanctuary in Tennessee notified consumers of a data breach involving its third-party fundraising vendor, DonorPerfect. Unauthorized access occurred between Nov 25 and Dec 8, 2023, exposing names and bank account information. The Sanctuary engaged law enforcement and provided 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 25, 2023

Begins

Apr 2, 2024

Filed

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_3f9c480c503f5e242024-04-02Verified
Massachusetts State AGbd_4286e4b2b0b690ed2024-04-02Candidate
Massachusetts State AGbd_b5950577ad6576b12024-04-02Verified
Indiana State AGbd_dbe7bb04be4d99932024-04-01 · +1dVerified

Name: The Elephant Sanctuary in Tennessee
norm: the elephant sanctuary in tennessee

Name: The Elephant Sanctuary in Tennessee
norm: the elephant sanctuary in tennessee
Industry: Otherllm

Discovered: —
Breach occurred: Nov 25, 2023 – Dec 8, 2023
Materiality determined: —
Notification sent: Apr 2, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Financial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of InvestigationNotified local law enforcement
Third party: via DonorPerfect
Initial access: supply_chain

During the incident: Undertook a review of the impacted files to determine whether any contained personal information
Notified the Federal Bureau of Investigation and local law enforcement
Cooperating with any investigations to hold the perpetrator accountable
Arranged to provide credit monitoring services through IDX
Implemented measures to enhance network security and minimize the risk of a similar incident occurring in the future
Changes made: Locking down its systems
Strengthening numerous security protocols
Enhanced network security
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 3 states

View merged incident ↗

Indiana State AGApr 1 · first

Massachusetts State AG+1d

Vermont State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-04-02-elephant-sanctuary-tennessee-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 2, 2024
Raw hash: 7d6a7aa257e63e64ecb07ab450f5216347a6379cd750270c363c424e86636c61

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityThe Elephant Sanctuary in Tennessee

Victim entityThe Elephant Sanctuary in Tennessee

IncidentThird-Party / Supply Chain

Stated responseUndertook a review of the impacted files to determine whether any contained personal information

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov