MalwareRansomwareCapture Stored DataRansom DemandedRansom PaidData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedDownstream VictimsIDENTITY_BASICPIILowResolved

American Symphony Orchestra League

bd_5bbb3b52b74f4a4b · schema v1 · pii pii-v1

Full breach record for American Symphony Orchestra League →

Blackbaud, a database vendor serving the League of American Orchestras (American Symphony Orchestra League), suffered a ransomware attack in which a cybercriminal removed a backup file containing donor/constituent personal information (names, addresses, phone numbers, email, demographic data, donation history). No credit card, bank account, or SSN data was involved. Blackbaud paid the ransom and obtained confirmation the data was destroyed. The letter was sent October 2020.

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

bd_1cf2ac69ba17738bMaine State AGfiled 2020-10-05Candidate
bd_788f208c543bd7c8Oregon State AGfiled 2020-10-05Candidate

Source provenance

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-194747
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 5, 2020
Raw hash: ea4e0289c3c2b6b4e946e4db2172f58b2df07eaed8e4b3353daa2867e6155928

Reporting entity

Name: American Symphony Orchestra League
norm: american symphony orchestra league

Victim entity

Name: American Symphony Orchestra League
norm: american symphony orchestra league

Incident

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: IDENTITY_BASICPII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Third party: via Blackbaud

Compliance

Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.