Vermont State Colleges
bd_647189aef77f3c08 · schema v1 · pii pii-v1
Full breach record for Vermont State Colleges →Vermont State Colleges (VSC) notified the New Hampshire Attorney General on February 24, 2021, of a data event involving its third-party vendor, Blackbaud, Inc. Blackbaud experienced a ransomware attack in May 2020, resulting in system encryption and data exfiltration before the threat actor was locked out on May 20, 2020. VSC's investigation determined that potentially affected data included names, addresses, Social Security numbers, and financial account information. Five New Hampshire residents were identified as potentially affected. VSC provided 12 months of credit monitoring through Kroll and is implementing additional safeguards.
J jump to incidentP pin to compareR raw source
Incident timeline
May 1, 2020
Begins
Jul 16, 2020
Discovered
Mar 2, 2021
Filed
vs. sector median
+24 wks slower
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- Massachusetts State AGbd_d04c701f64e8742c2021-03-01 · +1dVerified
Filing propagation · 2 filings · 2 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.