MalwareEducationEducationRansomwareRansom DemandedRansom PaidData ExfiltratedData EncryptedSupply Chain (3P Vendor)Identity (basic)Government IDMediumContained

Florida State College at Jacksonville Foundation

bd_7b9b4f2a83751a42 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 16, 2020

Filed

Nov 30, 2020

To disclose

20 weeks

Affected

51state residents only

Linked

5 filings

Confidence

62%

Full breach record for Florida State College at Jacksonville Foundation →

Florida State College at Jacksonville Foundation notified of Blackbaud ransomware incident affecting backup files containing names and SSNs. Unauthorized access occurred Feb 7 - May 20, 2020. Blackbaud paid ransom, destroyed data. Foundation provided 1-year Kroll identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 160 days

discovery → filing · 20 weeks / 137 days

Feb 7, 2020

Begins

Jul 16, 2020

Discovered

Nov 30, 2020

Filed

This filing is one of 5 filings about the same incident.View merged incident

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_67c1711743513d8e2020-11-30Candidate
California State AGbd_6bc4a6bc0d951f002020-11-30Verified
Massachusetts State AGbd_a1f556119ec760672020-11-30Verified
New Hampshire State AGbd_139658b765d3625d2020-12-01 · +1dVerified

Name: Florida State College at Jacksonville Foundation
norm: florida state college at jacksonville

Name: Florida State College at Jacksonville Foundation
norm: florida state college at jacksonville
Industry: Educationllm

Discovered: Jul 16, 2020
Breach occurred: Feb 7, 2020 – May 20, 2020
Undetected for: 160 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 51state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Blackbaud reported that it has been working with law enforcement
Third party: via Blackbaud

During the incident: Conducted own investigation of the Blackbaud services
Secured the services of Kroll to provide identity monitoring at no cost for one year
Deleted the non-encrypted field containing Social Security numbers
Instituted a policy ensuring that Social Security numbers will only be contained in properly encrypted fields
Changes made: Blackbaud identified and fixed the vulnerability associated with this incident
Implemented several changes that will better protect data from any subsequent incidents
Undertaking additional efforts to harden their environment through enhancements to access management
Network segmentation
Deployment of additional endpoint and network-based platforms
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(137 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGNov 30 · first

California State AGNov 30 · first

Massachusetts State AGNov 30 · first

Montana State AGNov 30 · first · this page

New Hampshire State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/flstateSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 30, 2020
Raw hash: 90a663bad464652564e85c20fa0228c4f1925dc6e154dd1ca25716972da3d382

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityFlorida State College at Jacksonville Foundation

Victim entityFlorida State College at Jacksonville Foundation

Incidentdiscovered Jul 16, 2020

Stated responseConducted own investigation of the Blackbaud services

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov