MalwareOtherRansomwareRansom DemandedData ExfiltratedIdentity (basic)Financial accountLowContained

Pérez Art Museum Miami

bd_1ef94cddc3ade243 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 16, 2020

Filed

Sep 8, 2020

To disclose

8 weeks

Affected

1state residents only

Confidence

67%

Full breach record for Pérez Art Museum Miami →2 incidents on file

Pérez Art Museum Miami (PAMM) notified NH AG of a security incident involving its vendor Blackbaud. An attempted ransomware attack on Blackbaud resulted in unauthorized access to data of one NH resident, including name, address, and financial account info. PAMM learned of the potential exposure on August 26, 2020. Blackbaud engaged forensic experts and law enforcement. Data was reportedly destroyed.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 54 days

Jul 16, 2020

Discovered

Sep 8, 2020

Filed

vs. sector median

+1 wks slower

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Pérez Art Museum Miami
norm: perez art museum miami
Domain: pamm.org

Name: Pérez Art Museum Miami
norm: perez art museum miami
Domain: pamm.org
Industry: Otherllm

Discovered: Jul 16, 2020
Materiality determined: —
Notification sent: Sep 18, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General Consumer Protection Bureau

During the incident: Engaged independent forensic experts and law enforcement to investigate the incident and assist in remediation
Implemented security measures designed to prevent recurrence of such an attack
Evaluating how it can work with Blackbaud to implement additional protective actions to prevent future security incidents
Intends to mail notice to the individual by September 18, 2020
Changes made: Implemented security measures designed to prevent recurrence of such an attack
Evaluating how it can work with Blackbaud to implement additional protective actions to prevent future security incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(54 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/perez-art-museum-miami-20200908.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 8, 2020
Raw hash: d89a0244b4ad4f81290845ba8f90d624a13741be3c296a10f8f0621b33506b45

Reporting entityPérez Art Museum Miami

Victim entityPérez Art Museum Miami

Incidentdiscovered Jul 16, 2020

Stated responseEngaged independent forensic experts and law enforcement to investigate the incident and assist in remediation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov