DisclosureLens
HackingEducationEducationSupply Chain (3P Vendor)Data ExfiltratedGovernment IDIdentity (basic)HighContained

Friends School of Baltimore, Inc.

bd_3c80cdac70904ecf · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 22, 2021

Filed

Apr 29, 2021

To disclose

9 weeks

Affected · nationwide

2,15110 in this filing

Confidence

66%
Full breach record for Friends School of Baltimore, Inc. →2 incidents on file

Friends School of Baltimore reported a data breach involving its third-party vendor, Blackbaud, Inc. The incident occurred between February 7, 2020, and May 20, 2020, and was discovered on February 22, 2021. The breach affected 2,151 individuals, including 10 Maine residents. Personal information, including names and Social Security Numbers, was compromised. The school provided 24 months of credit monitoring and identity theft protection services to affected individuals.

Maine clockDiscovered Feb 22, 2021 → Filed with AG Apr 29, 202166d ⏱ ME AG >30d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 381 days
discovery → filing · 9 weeks / 66 days

Feb 7, 2020

Begins

Feb 22, 2021

Discovered

Apr 29, 2021

Filed

vs. sector median

+1 wks slower

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2,151 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.