The Bowery Mission
bd_529f776d75d7985a · schema v1 · pii pii-v1
Full breach record for The Bowery Mission →The Bowery Mission, a non-profit organization, was impacted by a security incident involving its cloud software provider, Blackbaud. An unauthorized third party gained access to Blackbaud's systems between February 7, 2020, and July 9, 2020. It was initially believed that client data was encrypted and inaccessible, but Blackbaud later confirmed that the information was unencrypted and accessible to the cybercriminal. The breach, discovered on October 30, 2020, affected 161 individuals, including 2 Maine residents, and compromised their names and Social Security numbers. The Bowery Mission began notifying affected individuals on November 17, 2020, and offered 12 months of complimentary credit and identity monitoring services.
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/7dcb88cb-262d-480e-9672-42535850c558.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 15, 2020
- Raw hash
- 2623e8bd819a88e0623b0388b9128b842c3be5c9e0b14c91a707440120e9dbfd
Reporting entity
- Name
- The Bowery Missionnorm: the bowery mission
Victim entity
- Name
- The Bowery Missionnorm: the bowery mission
Incident
- Discovered
- Oct 30, 2020
- Materiality determined
- —
- Notification sent
- Nov 17, 2020
- Affected individuals
- 2
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
Compliance
- Time to disclose
- 16 days(16 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 16d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 30, 2020→ Filed with AG: Nov 15, 202016d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.