MalwareHealthcareProfessional ServicesHealthcareRansomwareData EncryptedCustomer Data InvolvedEmployee Data InvolvedGovernment IDFinancial accountHealth (basic)PHIMediumContained

Buddhist Tzu Chi Foudation

bd_784a3ea49be50b80 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 15, 2021

Filed

Aug 2, 2021

To disclose

18 days

Affected

Not disclosed

Confidence

66%

Buddhist Tzu Chi Foundation disclosed a ransomware attack discovered on July 15, 2021. The incident compromised systems containing private and confidential information, including Social Security Numbers, driver's license numbers, financial information, and medical/health insurance information. The organization engaged law enforcement and third-party specialists, reviewed network security policies, and offered credit monitoring services to impacted staff, volunteers, vendors, and clients.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 18 days

Jul 15, 2021

Begins

Jul 15, 2021

Discovered

Aug 2, 2021

Filed

vs. sector median

8 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Buddhist Tzu Chi Foudation
norm: buddhist tzu chi foudation
Domain: global.tzuchi.org

Name: Buddhist Tzu Chi Foudation
norm: buddhist tzu chi foudation
Domain: global.tzuchi.org
Industry: HealthcarellmProfessional Servicesllm

Discovered: Jul 15, 2021
Breach occurred: Jul 15, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Government IDFinancial accountHealth (basic)PHI
Data elements: Social Security numberMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Contacted local and Federal law enforcement

During the incident: Contacted local and Federal law enforcement
Began working with third-party specialists to determine the source of the incident and extent of systems affected
Reviewing our network security polices
Establishing a dedicated assistance line to answer your questions
Providing credit monitoring services to potentially impacted individuals
Changes made: Taking immediate steps to further enhance its security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-543449
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 2, 2021
Raw hash: f5eeab98d04aca6999c0754fe6005dee1f14262229ae66037196030e7359211f

Reporting entityBuddhist Tzu Chi Foudation

Victim entityBuddhist Tzu Chi Foudation

Incidentdiscovered Jul 15, 2021

Stated responseContacted local and Federal law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov