MalwareRansomwareData EncryptedSupply Chain (3P Vendor)IDENTITY_GOVERNMENTIDENTITY_BASICHighContained
The Madeira School, Inc.
bd_4b583120e6f35409 · schema v1 · pii pii-v1
Full breach record for The Madeira School, Inc. →The Madeira School, an educational institution in Virginia, reported a ransomware incident involving its third-party vendor, Blackbaud. The breach occurred between February 7, 2020, and May 20, 2020, and was discovered in October 2020. The incident compromised the names and Social Security Numbers of 1,107 individuals, including 4 Maine residents. The school notified affected individuals in writing on December 4, 2020, and offered identity theft protection services.
Maine clockDiscovered Oct 6, 2020 → Filed with AG Dec 4, 202059d ⏱ ME AG >30d8 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,107 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/cbf376de-6f76-4d4d-8f3a-15cd5d64f2db.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 4, 2020
- Raw hash
- 0df3d3d5ccef34eaa6f540a0db261f3727a30738cf74c4dfc25bbd2ccaf3ecc7
Reporting entity
- Name
- The Madeira School, Inc.norm: the madeira school
- Domain
- madeira.org
- Industry
- education
Victim entity
- Name
- The Madeira School, Inc.norm: the madeira school
- Domain
- madeira.org
- Industry
- education
Incident
- Discovered
- Oct 6, 2020
- Materiality determined
- —
- Notification sent
- Dec 4, 2020
- Affected individuals
- 1,107
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- supply_chain
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- ME AG >30d · 59d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 6, 2020→ Filed with AG: Dec 4, 202059d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.