HackingStolen CredentialsCapture Stored DataSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedPIIFINANCIAL_ACCOUNTLowContained
New England Science & Sailing
bd_3de5c2da9527c516 · schema v1 · pii pii-v1
Full breach record for New England Science & Sailing →New England Science and Sailing Foundation (NESS) reported a third-party data breach involving its donor management vendor, DonorPerfect. On February 5, 2024, DonorPerfect notified NESS of unauthorized access to images of donor checks. The incident affected 2 New Hampshire residents. DonorPerfect contained the issue, notified law enforcement, and offered credit monitoring. NESS notified affected individuals on March 19, 2024.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/new-england-science-sailing-foundation-dba-ness-20240319.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 19, 2024
- Raw hash
- b499cb7e40d20b30099f6ca2621a9b9c8e9412b765e651789efc9037002ed027
Reporting entity
- Name
- New England Science and Sailing Foundation, Inc.norm: new england science and sailing
Victim entity
- Name
- New England Science & Sailingnorm: new england science sailing
- Domain
- nessf.org
Incident
- Discovered
- Feb 5, 2024
- Materiality determined
- —
- Notification sent
- Mar 19, 2024
- Affected individuals
- 2
- Data types
- PIIFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General's OfficeDonorPerfect reported incident to FBI and local law enforcement
- Initial access
- trusted_relationship
Compliance
- Time to disclose
- 6 weeks(43 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.