HackingOtherHacking OtherSupply Chain (3P Vendor)Customer Data InvolvedGovernment IDHighResolved

Special Olympics Wisconsin, Inc.

bd_451d96e8265e536c · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 20, 2020

Filed

Dec 14, 2020

To disclose

17 weeks

Affected · nationwide

23,7242 in this filing

Linked

4 filings

Confidence

50%

Full breach record for Special Olympics Wisconsin, Inc. →2 incidents on file

Special Olympics Wisconsin, Inc. reported a data breach affecting 2 Maine residents, which was part of a larger incident at its software provider, Blackbaud, Inc. The breach occurred between February 7, 2020, and May 20, 2020, and was discovered on August 20, 2020. The compromised data included names and driver's license or state ID numbers.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Aug 20, 2020 → Filed with AG Dec 14, 2020116d ✗ ME AG >90d17 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 195 days

discovery → filing · 17 weeks / 116 days

Feb 7, 2020

Begins

Aug 20, 2020

Discovered

Dec 14, 2020

Filed

vs. sector median

+8 wks slower

This filing is one of 4 about the same incident.View merged incident

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_2c13850219174a242020-11-04 · +40dVerified
Maine State AGbd_ed4719b3f21ffe7a2020-10-30 · +45dCandidate
Indiana State AGbd_f527fde662fc556e2020-10-30 · +45dVerified

Name: Special Olympics Wisconsin, Inc.
norm: special olympics wisconsin

Name: Special Olympics Wisconsin, Inc.
norm: special olympics wisconsin
Industry: Otherllm

Discovered: Aug 20, 2020
Breach occurred: Feb 7, 2020 – May 20, 2020
Undetected for: 195 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 30, 2020
Affected individuals: 23,724state + nationwide
Data types: Government ID
Data elements: Driver's licence number
Attack vector: Third-Party / Supply Chain

Time to disclose: 17 weeks(116 days from discovery to filing)
Compliance flags: ME AG >90d · 116dME resident >60d · 71d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Aug 20, 2020
→ Filed with AG: Dec 14, 2020
116d 90 days ME AG >90d
Maine
Discovered: Aug 20, 2020
→ Notified: Oct 30, 2020
71d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Aug 20, 2020 → Filed with AG: Dec 14, 2020	116d	90 days	ME AG >90d
Maine	Discovered: Aug 20, 2020 → Notified: Oct 30, 2020	71d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 3 states

View merged incident ↗

Maine State AGOct 30 · first

Indiana State AGOct 30 · first

Massachusetts State AG+5d

Maine State AG+45d · this page

Pattern: first filing Oct 30 (ME), last Dec 14 (ME) — a 45-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/96e33a5d-e964-4c13-97ed-f2bc3dcdaa86.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 14, 2020
Raw hash: fa920c124d5774e4f49013956d7ae01ae1f69ab5e14637571741f291d58b7b94

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entitySpecial Olympics Wisconsin, Inc.

Victim entitySpecial Olympics Wisconsin, Inc.

Incidentdiscovered Aug 20, 2020

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov