HackingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHighResolved
Annunciation Orthodox School
bd_056280fb88119c7e · schema v1 · pii pii-v1
Full breach record for Annunciation Orthodox School →Annunciation Orthodox School reported a third-party data breach involving Blackbaud Systems on 07/15/2020, discovered 09/29/2020. 1,642 individuals affected, including 1 Maine resident. Data exposed: names and Social Security Numbers. Notification sent 01/20/2021 with 24 months credit monitoring.
Maine clockDiscovered Sep 29, 2020 → Filed with AG Mar 15, 2021167d ✗ ME AG >90d24 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,642 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/fca1696b-5bba-481a-88d5-9c58c354bdb9.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 15, 2021
- Raw hash
- ad78f3fe12da2133fb85e4f6fb395efb59724b981d753cb2832c72f2e0ea6929
Reporting entity
- Name
- Annunciation Orthodox Schoolnorm: annunciation orthodox school
Victim entity
- Name
- Annunciation Orthodox Schoolnorm: annunciation orthodox school
Incident
- Discovered
- Sep 29, 2020
- Materiality determined
- —
- Notification sent
- Jan 20, 2021
- Affected individuals
- 1,642
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- Partner
- Regulator citations
- Filed notification with Maine Attorney General
- Third party
- via Blackbaud Systems
- Initial access
- supply_chain
Compliance
- Time to disclose
- 24 weeks(167 days from discovery to filing)
- Compliance flags
- ME AG >90d · 167dME resident >60d · 113d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 29, 2020→ Filed with AG: Mar 15, 2021167d 90 days ME AG >90d Maine Discovered: Sep 29, 2020→ Notified: Jan 20, 2021113d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.