HackingEducationEducationData MishandlingSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDMediumResolved

Fort Hays State University Foundation

bd_2696b92e1072e84b · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Apr 19, 2021

To disclose

—

Affected

41state residents only

Linked

9 filings

Confidence

68%

Full breach record for Fort Hays State University Foundation →2 incidents on file

Fort Hays State University Foundation filed a supplemental notification with the New Hampshire Attorney General regarding a third-party vendor incident involving Blackbaud. The filing identifies 41 additional New Hampshire residents whose names and Social Security Numbers were exposed. The investigation is concluded, and the Foundation is offering two years of credit monitoring services to affected residents.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Apr 19, 2021

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 9 filings about the same incident.View merged incident

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Oregon State AGbd_05a22e6205fcfbfb2021-04-16 · +3dCandidate
Indiana State AGbd_316059aa27517d3f2021-04-16 · +3dVerified
California State AGbd_342acd5f7ba86b642021-04-16 · +3dVerified
Maine State AGbd_f2bfd9f35ba072fc2021-04-16 · +3dVerified

Show 4 more filings ↓up to 66d gap

New Hampshire State AGbd_817630e32a998e882021-02-16 · +62dVerified by operator
Montana State AGbd_39783ab69d8df39f2021-02-12 · +66dVerified by operator
Maine State AGbd_9c860b9e878039ee2021-02-12 · +66dVerified by operator
Indiana State AGbd_a1402bd601ea289c2021-02-12 · +66dVerified by operator

Name: Fort Hays State University Foundation
norm: fort hays state university

Name: Fort Hays State University Foundation
norm: fort hays state university
Industry: Educationllm

Discovered: —
Materiality determined: —
Notification sent: Apr 16, 2021
Affected individuals: 41state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: Partner
Regulator citations: Supplemental notification to New Hampshire Office of the Attorney General
Initial access: supply_chain

During the incident: Providing written notice to the additional New Hampshire residents by mailing letters
Offering all New Hampshire residents a complimentary, two-year membership to credit monitoring and identity theft prevention services through Experian, CyberScout, or Kroll
Established a dedicated phone number where the individuals may obtain more information regarding the incident
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 6 states

View merged incident ↗

Montana State AGFeb 12 · first

Maine State AGFeb 12 · first

Indiana State AGFeb 12 · first

New Hampshire State AG+4d

Oregon State AG+63d

Indiana State AG+63d

California State AG+63d

Maine State AG+63d

New Hampshire State AG+66d · this page

Pattern: first filing Feb 12 (MT), last Apr 19 (NH) — a 66-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/fort-hays-state-university-foundation-20210419.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 19, 2021
Raw hash: 6ef60d956f8bbb91b64750f4b5313b324e92eb4653a3cbbf8ba7633441805e82

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityFort Hays State University Foundation

Victim entityFort Hays State University Foundation

IncidentThird-Party / Supply Chain

Stated responseProviding written notice to the additional New Hampshire residents by mailing letters

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov