HackingSupply Chain (3P Vendor)Delayed DiscoveryData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTHigh
Maryknoll School
bd_864032707bbf1493 · schema v1 · pii pii-v1
Full breach record for Maryknoll School →Maryknoll School, an educational institution, reported a data breach affecting 8,778 individuals due to a security incident at its third-party vendor, Blackbaud, Inc. The breach, which occurred between February 7, 2020, and May 20, 2020, was discovered on December 23, 2020. The compromised information included names and Social Security numbers. The school began notifying affected individuals on March 24, 2021, and offered 24 months of identity theft protection services.
Maine clockDiscovered Dec 23, 2020 → Filed with AG Mar 24, 202191d ✗ ME AG >90d13 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_0fced5d19b156593Montana State AGfiled 2021-03-24Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f9005027-0f5a-42b5-a3c5-f4985fe2a461.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 24, 2021
- Raw hash
- 3d1e78df93a6f68013ef829b18e728073cd5d961676f88195b5b00b6392a5325
Reporting entity
- Name
- BAKER & HOSTETLER LLPnorm: baker hostetler
Victim entity
- Name
- Maryknoll Schoolnorm: maryknoll school
- Industry
- Education
Incident
- Discovered
- Dec 23, 2020
- Materiality determined
- —
- Notification sent
- Mar 24, 2021
- Affected individuals
- 8,778
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
Compliance
- Time to disclose
- 13 weeks(91 days from discovery to filing)
- Compliance flags
- ME AG >90d · 91dME resident >60d · 91d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 23, 2020→ Filed with AG: Mar 24, 202191d 90 days ME AG >90d Maine Discovered: Dec 23, 2020→ Notified: Mar 24, 202191d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.