MalwareOtherRansomwareSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Marines' Memorial Association & Foundation

bd_24a6df1599024993 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 16, 2020

Filed

Apr 12, 2021

To disclose

39 weeks

Affected

27state residents only

Linked

7 filings

Confidence

66%

Full breach record for Marines' Memorial Association & Foundation →

Marines' Memorial Association & Foundation notified NH AG of a third-party vendor (Blackbaud) ransomware incident. Data exfiltrated before May 20, 2020. Incident discovered July 16, 2020. 27 NH residents affected. Data included names, addresses, SSNs, DOBs, bank account numbers. Notification sent April 6, 2021. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 76 days

discovery → filing · 39 weeks / 270 days

May 1, 2020

Begins

Jul 16, 2020

Discovered

Apr 12, 2021

Filed

vs. sector median

+31 wks slower

This filing is one of 7 about the same incident.View merged incident

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Montana State AGbd_0a5a7a3341869b7b2021-04-06 · +6dCandidate
Washington State AGbd_1df75684dd9eff162021-04-06 · +6dVerified by operator
Indiana State AGbd_54cbdf830b24e1302021-04-06 · +6dVerified
Maine State AGbd_67ac2d4038cabcec2021-04-06 · +6dVerified by operator

Show 2 more filings ↓up to 6d gap

California State AGbd_d2fe0527402c57472021-04-06 · +6dVerified
Massachusetts State AGbd_e797f03f5607a3212021-04-06 · +6dVerified

Name: Marines' Memorial Association & Foundation
norm: marines memorial

Name: Marines' Memorial Association & Foundation
norm: marines memorial
Industry: Otherllm

Discovered: Jul 16, 2020
Breach occurred: May 1, 2020 – May 20, 2020
Undetected for: 76 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 6, 2021
Affected individuals: 27state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Regulator citations: Notified Office of the New Hampshire Attorney General Consumer Protection Bureau
Initial access: supply_chain

During the incident: Commenced own investigation to determine scope of incident
Worked with forensic investigators to gather further information from Blackbaud
Obtained list of potentially impacted individuals
Provided written notice to all affected individuals
Providing individuals with access to credit monitoring services through Experian for one year at no cost
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Notifying regulators as required
Changes made: Diligently reviewing existing policies and procedures regarding programs and services provided by third-party vendors
Working with Blackbaud to confirm they have implemented additional measures and safeguards to protect against this type of incident in the future
Continuing to evaluate, monitor, and update all information systems and cyber protection tools
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 39 weeks(270 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Montana State AGApr 6 · first

Washington State AGApr 6 · first

Indiana State AGApr 6 · first

Maine State AGApr 6 · first

California State AGApr 6 · first

Massachusetts State AGApr 6 · first

New Hampshire State AG+6d · this page

Pattern: first filing Apr 6 (MT), last Apr 12 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/marines-memorial-20210412.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 12, 2021
Raw hash: 7193976b554d0176bf1d0e82329da0b1c62e70ffd343cb38682328efc28c0767

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityMarines' Memorial Association & Foundation

Victim entityMarines' Memorial Association & Foundation

Incidentdiscovered Jul 16, 2020

Stated responseCommenced own investigation to determine scope of incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov