MalwareOtherRansomwareData ExfiltratedRansom DemandedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumActive

Florida Conference of Seventh-day Adventists

bd_7d8f41f78110f563 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 26, 2020

Filed

Sep 30, 2020

To disclose

5 weeks

Affected

1state residents only

Linked

3 filings

Confidence

67%

Full breach record for Florida Conference of Seventh-day Adventists →

Florida Conference of Seventh-day Adventists notified NH AG of ransomware incident discovered Aug 26, 2020. Data exfiltrated included employee names, SSNs, and financial account info. One NH resident affected. Notification mailed Sept 29, 2020. Forensic investigation by Kroll Associates ongoing.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 35 days

Aug 26, 2020

Discovered

Sep 30, 2020

Filed

vs. sector median

2 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_75565614d8ba36832020-09-29 · +1dCandidate
Massachusetts State AGbd_ffccc724085b53792020-10-06 · +6dVerified

Name: BAKER & HOSTETLER LLP
norm: baker hostetler

Name: Florida Conference of Seventh-day Adventists
norm: florida conference of seventh day adventists
Domain: floridaconference.com
Industry: Otherllm

Discovered: Aug 26, 2020
Materiality determined: —
Notification sent: Sep 29, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified Attorney General Gordon MacDonald of New Hampshire

During the incident: Retained Baker & Hostetler, LLP to provide legal advice and assistance investigating and responding to the incident
Engaged Kroll Associates, a cybersecurity and computer forensic consulting firm to conduct a forensic investigation
Reported the incident to law enforcement
Established a dedicated call center
Began mailing notification letters via United States Postal Service First Class Mail
Changes made: Implementing additional technical safeguards
Reconfiguring some network appliances
Resetting passwords
Implementing additional administrative controls for access to systems
Offering complimentary one year membership in Experian IdentityWorks Credit 38
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(35 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGSep 29 · first

New Hampshire State AG+1d · this page

Massachusetts State AG+7d

Pattern: first filing Sep 29 (ME), last Oct 6 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/florida-conference-seventh-day-adventists-20200930.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 30, 2020
Raw hash: e6ee55ad36a90097a7750eec4afb092b28e205ca8a6f217f15625741add5fbf9

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityBAKER & HOSTETLER LLP

Victim entityFlorida Conference of Seventh-day Adventists

Incidentdiscovered Aug 26, 2020

Stated responseRetained Baker & Hostetler, LLP to provide legal advice and assistance investigating and responding to the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov