MalwareEducationEducationRansomwareSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)LowContained

California Western School of Law

bd_5fd93cdb3c2b158d · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 16, 2020

Filed

Jul 31, 2020

To disclose

15 days

Affected

Not disclosed

Confidence

66%

Full breach record for California Western School of Law →

California Western School of Law notified alumni of a data security incident involving third-party vendor Blackbaud, Inc. Blackbaud experienced a ransomware attack on its hosting system, potentially compromising contact information for some individuals. No credit card, bank account, or SSN data was disclosed. Blackbaud contained the incident and implemented fixes. CWSL is working with security and legal teams.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 15 days

Jul 16, 2020

Discovered

Jul 31, 2020

Filed

vs. sector median

8 wks faster

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: California Western School of Law
norm: california western school of law
Domain: cwsl.edu

Name: California Western School of Law
norm: california western school of law
Domain: cwsl.edu
Industry: Educationllm

Discovered: Jul 16, 2020
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Third party: via Blackbaud, Inc.
Initial access: supply_chain

During the incident: Working closely with our own security and legal teams
Continuing to communicate with Blackbaud
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 days(15 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-192644
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 31, 2020
Raw hash: 3b89be9a037af0d4b3cb50e058704bff10a0f4065982b25c4380f4b5ac578458

Reporting entityCalifornia Western School of Law

Victim entityCalifornia Western School of Law

Incidentdiscovered Jul 16, 2020

Stated responseWorking closely with our own security and legal teams

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov