MalwareRansomwareSupply Chain (3P Vendor)Data ExfiltratedRansom DemandedRansom PaidData EncryptedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Francis Parker School
bd_3e65471c43cb93c7 · schema v1 · pii pii-v1
Full breach record for Francis Parker School →Francis Parker School reported a data breach involving its third-party vendor, Blackbaud. A ransomware attack on Blackbaud between February and May 20, 2020, exposed personal information including names, addresses, phone numbers, and Social Security/Tax IDs of students and families. The school notified affected individuals, who were offered 24 months of credit monitoring. The FBI was engaged, and a ransom was paid to the attackers.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-198248
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 5, 2021
- Raw hash
- 2437cffbaf6d3eff3de5b130bae33d1171e0bca0585f6f24ee5e91641ca9e7c7
Reporting entity
- Name
- Francis Parker Schoolnorm: francis parker school
Victim entity
- Name
- Francis Parker Schoolnorm: francis parker school
Incident
- Discovered
- Feb 20, 2020
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed breach notification with California Office of the Attorney General
- Initial access
- supply_chain
Compliance
- Time to disclose
- 46 weeks(320 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.