MalwareOtherRansomwareCapture Stored DataData ExfiltratedData EncryptedTargetedIdentity (basic)Government IDMediumContained

First Baptist Church of Hammond

bd_5566a28cc1e47788 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 5, 2025

Filed

Aug 20, 2025

To disclose

7 weeks

Affected

2state residents only

Linked

9 filings

Confidence

63%

Full breach record for First Baptist Church of Hammond →

First Baptist Church of Hammond notified Rhode Island residents that an unknown cyber actor accessed its network between June 29 and July 2, 2025, encrypting files and copying data containing names and SSNs. The breach was discovered on July 5, 2025. The church is offering 12 months of complimentary identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 6 days

discovery → filing · 7 weeks / 46 days

Jun 29, 2025

Begins

Jul 5, 2025

Discovered

Aug 20, 2025

Filed

vs. sector median

1 wks faster

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siterhysidabd_58ac4cdec3e0a04d2025-07-29 · +22dVerified by operator

Regulatory filings (7) · sorted by filing gap

Vermont State AGbd_4204e1002cded4262025-08-20Verified
Nebraska State AGbd_17cf995dead9c67d2025-08-21 · +1dVerified by operator
Massachusetts State AGbd_8d4ca7e05a750f782025-08-21 · +1dVerified by operator
Indiana State AGbd_e3aed04ac4644d012025-08-21 · +1dVerified by operator

Show 3 more filings ↓up to 19d gap

New Hampshire State AGbd_e9e27b94d10bddd42025-08-21 · +1dVerified by operator
Maine State AGbd_f26219b192211b432025-08-21 · +1dVerified by operator
Illinois State AGbd_b1a7ad01b125a0fe2025-08-01 · +19dVerified by operator

Name: First Baptist Church of Hammond
norm: first baptist church of hammond

Name: First Baptist Church of Hammond
norm: first baptist church of hammond
Industry: Otherllm

Discovered: Jul 5, 2025
Breach occurred: Jun 29, 2025 – Jul 2, 2025
Undetected for: 6 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 21, 2025
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial

During the incident: Published a notice on our website on July 15
Took steps to confirm the security of the computer network
Providing individuals with free resources and guidance, including identity monitoring services
Offering complimentary identity monitoring services
Changes made: Taken measures to reduce the risk of an issue like this reoccurring
Continue to evaluate and update policies and practices
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(46 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Illinois State AGAug 1 · first

Vermont State AG+19d

Montana State AG+19d · this page

Nebraska State AG+20d

Massachusetts State AG+20d

Indiana State AG+20d

New Hampshire State AG+20d

Maine State AG+20d

Pattern: first filing Aug 1 (IL), last Aug 21 (ME) — a 20-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/08/Consumer-notification-letter-59.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 20, 2025
Raw hash: 03a1a43caba4f8c778fb36dc674f7d4d70c0ac8f6889fc42779deb80be8a4424

Linked disclosures

Ransomware claims (1)

Regulatory filings (7) · sorted by filing gap

Reporting entityFirst Baptist Church of Hammond

Victim entityFirst Baptist Church of Hammond

Incidentdiscovered Jul 5, 2025

Stated responsePublished a notice on our website on July 15

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov