MalwareRansomwareSupply Chain (3P Vendor)Data ExfiltratedData EncryptedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained

INTERNATIONAL MEDICAL CORPS

bd_1c91a659234d744d · schema v1 · pii pii-v1

Full breach record for INTERNATIONAL MEDICAL CORPS →

International Medical Corps notified California regulators of a ransomware attack on third-party vendor Blackbaud. The incident occurred between February 7, 2020, and May 20, 2020. Backup files containing donor names and financial account information (scanned checks) were exfiltrated. Blackbaud paid a ransom and confirmed the files were destroyed. International Medical Corps offered complimentary credit monitoring and is securing remaining unencrypted financial documents.

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

bd_1fbb5179a9f48a55Montana State AGfiled 2021-02-26Candidate
bd_902bbb9a995b4591Maine State AGfiled 2021-02-26Verified by operator

Source provenance

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-538384
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 26, 2021
Raw hash: 9b5e2ce73aa7850aa91fd42894ea70295c859a0a5c535911cc81cfc5256dd7ee

Reporting entity

Name: INTERNATIONAL MEDICAL CORPS
norm: international medical corps

Victim entity

Name: INTERNATIONAL MEDICAL CORPS
norm: international medical corps

Incident

Discovered: May 20, 2020
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: IDENTITY_BASICFINANCIAL_ACCOUNT
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Initial access: supply_chain

Compliance

Time to disclose: 40 weeks(282 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.