MalwareRansomwareData EncryptedSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Forsyth Country Day School, Inc.
bd_43d752d88ea1a60f · schema v1 · pii pii-v1
Full breach record for Forsyth Country Day School, Inc. →Forsyth Country Day School reported a Blackbaud ransomware event occurring between Feb 7, 2020, and May 20, 2020, discovered on Oct 9, 2020. The incident affected 2,660 individuals, including 3 Maine residents. Personal identifiers and financial account numbers were compromised. The school notified affected individuals and provided 24 months of identity protection services via CyberScout HQ.
Maine clockDiscovered Oct 9, 2020 → Filed with AG Nov 11, 202033d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2,660 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0690b35c-91f7-4ae7-a673-b95cb4822c2e.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 11, 2020
- Raw hash
- d8ebd440b3cd41427f38d485ef2b8a92e65dde310ac11678b76702039752e011
Reporting entity
- Name
- Forsyth Country Day School, Inc.norm: forsyth country day school
- Domain
- fcds.org
- Industry
- Education
Victim entity
- Name
- Forsyth Country Day School, Inc.norm: forsyth country day school
- Domain
- fcds.org
- Industry
- Education
Incident
- Discovered
- Oct 9, 2020
- Materiality determined
- —
- Notification sent
- Nov 11, 2020
- Affected individuals
- 2,660
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- supply_chain
Compliance
- Time to disclose
- 5 weeks(33 days from discovery to filing)
- Compliance flags
- ME AG >30d · 33d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 9, 2020→ Filed with AG: Nov 11, 202033d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.