MalwareEducationEducationRansomwareStolen CredentialsRansom DemandedData ExfiltratedCustomer Data InvolvedMulti-Stage ChainGovernment IDIdentity (basic)MediumContained

Chadron State Foundation

bd_3f9198e22f2655ae · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 11, 2021

Filed

Apr 9, 2021

To disclose

13 weeks

Affected

6state residents only

Linked

4 filings

Confidence

66%

Full breach record for Chadron State Foundation →2 incidents on file

Chadron State Foundation notified NH AG of a ransomware attack on third-party vendor Blackbaud. Attack occurred Feb-May 2020. CSF discovered SSNs were unencrypted in Jan 2021. 6 NH residents affected. Ransom paid by Blackbaud. CSF offering 1 year credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 339 days

discovery → filing · 13 weeks / 88 days

Feb 7, 2020

Begins

Jan 11, 2021

Discovered

Apr 9, 2021

Filed

vs. sector median

+2 wks slower

This filing is one of 4 about the same incident.View merged incident

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_0820184ad525b71f2021-04-06 · +3dVerified
Maine State AGbd_752b7bb149a7c3032021-04-06 · +3dCandidate
Massachusetts State AGbd_d5ffa876b0649bd72021-04-14 · +5dVerified

Name: Chadron State Foundation
norm: chadron state

Name: Chadron State Foundation
norm: chadron state
Industry: Educationllm

Discovered: Jan 11, 2021
Breach occurred: Feb 7, 2020 – May 20, 2020
Undetected for: 339 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 6, 2021
Affected individuals: 6state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Filed Security Incident Notification with New Hampshire Office of Attorney General

During the incident: Notified its community of the incident by email
Posted within CSF’s magazine
Investigated and worked to confirm whether this information was present and encrypted
Worked to obtain current address information for affected individuals
Providing notification, including complimentary credit monitoring services for one (1) year
Taking steps to remove this information from their database
Changes made: Offering complimentary credit monitoring services for one (1) year
Taking steps to remove this information from their database
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(88 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGApr 6 · first

Maine State AGApr 6 · first

New Hampshire State AG+3d · this page

Massachusetts State AG+8d

Pattern: first filing Apr 6 (IN), last Apr 14 (MA) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/chadron-foundation-20210409.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 9, 2021
Raw hash: 7b09af56737a11d7546ad5fa3d04e6b09947e2b9809e9226df1e5ac60659b151

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityChadron State Foundation

Victim entityChadron State Foundation

Incidentdiscovered Jan 11, 2021

Stated responseNotified its community of the incident by email

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov