MalwareEducationEducationRansomwareRansom DemandedData ExfiltratedSupply Chain (3P Vendor)Identity (basic)PIILowContained

Wesleyan Christian Academy

bd_0514ced206d24c76 · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 23, 2020

Filed

Jan 14, 2021

To disclose

22 days

Affected

2state residents only

Linked

3 filings

Confidence

66%

Full breach record for Wesleyan Christian Academy →

Wesleyan Christian Academy notified affected individuals of a ransomware incident involving third-party vendor Blackbaud. The threat actor removed legacy backup data prior to May 20, 2020. Blackbaud paid the ransom to destroy data. One Rhode Island resident was impacted. Credit monitoring services were offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 217 days

discovery → filing · 22 days

May 20, 2020

Begins

Dec 23, 2020

Discovered

Jan 14, 2021

Filed

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_1ed00e9f8e0daa792021-01-14Verified
Massachusetts State AGbd_7a6b90ac9158c4242021-01-21 · +7dVerified

Name: Wesleyan Christian Academy
norm: wesleyan christian academy

Name: Wesleyan Christian Academy
norm: wesleyan christian academy
Industry: Educationllm

Discovered: Dec 23, 2020
Breach occurred: May 20, 2020
Undetected for: 217 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: Identity (basic)PII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1489 Service Stop or Obstruction
Threat actor: ExternalFinancial

During the incident: Stopped the ransomware attack
Engaged forensic experts to assist in their internal investigation
Hired a third-party team of experts, including a team of forensics accountants, to continue monitoring for any such activity
Engaged outside experts experienced in handling these types of incidents to help determine the impact to our stakeholders
Set up a dedicated and confidential toll-free response line
Changes made: Providing access to Single Bureau Credit Monitoring services at no charge for 24 months
Providing proactive fraud assistance
Providing remediation support from a CyberScout Fraud Investigator
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 days(22 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGJan 14 · first

Montana State AGJan 14 · first · this page

Massachusetts State AG+7d

Pattern: first filing Jan 14 (IN), last Jan 21 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/weslSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 14, 2021
Raw hash: c8df009fcb1f2cade6280f0f87063034088e735362271238f9865adad8467a9d

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityWesleyan Christian Academy

Victim entityWesleyan Christian Academy

Incidentdiscovered Dec 23, 2020

Stated responseStopped the ransomware attack

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov