MalwareProfessional ServicesProfessional ServicesRansomwareSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedGovernment IDPIIMediumResolved

Lakes and Prairies Community Action Partnership

bd_27b651fd4c80a5f5 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Nov 10, 2020

To disclose

—

Affected

1state residents only

Confidence

67%

Full breach record for Lakes and Prairies Community Action Partnership →

Lakes and Prairies Community Action Partnership notified individuals of a third-party ransomware incident involving software provider Blackbaud, Inc. in July 2020. The incident exposed personal information, including tax identification numbers. CAPLP engaged outside counsel to investigate and is offering 24 months of credit monitoring. The incident is resolved.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Nov 10, 2020

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Lakes and Prairies Community Action Partnership
norm: lakes and prairies community action partnership
Domain: caplp.org

Name: Lakes and Prairies Community Action Partnership
norm: lakes and prairies community action partnership
Domain: caplp.org
Industry: Professional Servicesllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Government IDPII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Third party: via Blackbaud, Inc.

During the incident: Engaged outside counsel to investigate the extent of the breach
Offering 24 months of complimentary credit monitoring through CyberScout
Changes made: Strengthened the Blackbaud network
Better secured data stored in the Blackbaud environment
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/lakesSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 10, 2020
Raw hash: 410d3b39833fe42f36acdb9a730a4626a2b76c8720810f7fa376d6fcb1a4d87a

Reporting entityLakes and Prairies Community Action Partnership

Victim entityLakes and Prairies Community Action Partnership

IncidentRansomware

Stated responseEngaged outside counsel to investigate the extent of the breach

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov