HackingEducationEducationData MishandlingSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDMediumResolved

Fort Hays State University Foundation

bd_2696b92e1072e84b · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Apr 19, 2021

To disclose

—

Affected

41state residents only

Linked

5 filings

Confidence

68%

Full breach record for Fort Hays State University Foundation →4 incidents on file

Fort Hays State University Foundation filed a supplemental notification with the New Hampshire Attorney General regarding a third-party vendor incident involving Blackbaud. The filing identifies 41 additional New Hampshire residents whose names and Social Security Numbers were exposed. The investigation is concluded, and the Foundation is offering two years of credit monitoring services to affected residents.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Apr 19, 2021

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 5 about the same incident.View merged incident

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Oregon State AGbd_05a22e6205fcfbfb2021-04-16 · +3dCandidate
Indiana State AGbd_316059aa27517d3f2021-04-16 · +3dVerified
California State AGbd_342acd5f7ba86b642021-04-16 · +3dVerified
Maine State AGbd_f2bfd9f35ba072fc2021-04-16 · +3dVerified

Name: Fort Hays State University Foundation
norm: fort hays state university

Name: Fort Hays State University Foundation
norm: fort hays state university
Industry: Educationllm

Discovered: —
Materiality determined: —
Notification sent: Apr 16, 2021
Affected individuals: 41state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: Partner
Regulator citations: Supplemental notification to New Hampshire Office of the Attorney General
Initial access: supply_chain

During the incident: Providing written notice to the additional New Hampshire residents by mailing letters
Offering all New Hampshire residents a complimentary, two-year membership to credit monitoring and identity theft prevention services through Experian, CyberScout, or Kroll
Established a dedicated phone number where the individuals may obtain more information regarding the incident
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Oregon State AGApr 16 · first

Indiana State AGApr 16 · first

California State AGApr 16 · first

Maine State AGApr 16 · first

New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/fort-hays-state-university-foundation-20210419.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 19, 2021
Raw hash: 6ef60d956f8bbb91b64750f4b5313b324e92eb4653a3cbbf8ba7633441805e82

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityFort Hays State University Foundation

Victim entityFort Hays State University Foundation

IncidentThird-Party / Supply Chain

Stated responseProviding written notice to the additional New Hampshire residents by mailing letters

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov