HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTHighContained
Habitat for Humanity of Michigan
bd_88848c745f77defc · schema v1 · pii pii-v1
Full breach record for Habitat for Humanity of Michigan →Habitat for Humanity - Michigan Fund reported a data breach in 2016 involving unsecured virtual hard drive backups containing personal information of approximately 5,000 individuals, including Social Security numbers. The data was exposed via a third-party backup provider.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5,000 affectedView incident
Source provenance
- Source URL
- https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2016/HabitatforHumanity.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 17, 2016
- Raw hash
- a493dceec57ace4a5bcf6ea86046638ee45144e304dbe07ae86f9966025e3045
Reporting entity
- Name
- Habitat for Humanity of Michigannorm: habitat for humanity of michigan
- Domain
- habitatmichigan.org
Victim entity
- Name
- Habitat for Humanity of Michigannorm: habitat for humanity of michigan
- Domain
- habitatmichigan.org
Incident
- Discovered
- Oct 1, 2016
- Materiality determined
- —
- Notification sent
- Nov 9, 2016
- Affected individuals
- 5,000
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1530 Data from Cloud Storage ObjectT1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Filed breach notification with South Carolina Department of Consumer Affairs
- Third party
- via former third-party backup provider
- Initial access
- supply_chain
Compliance
- Time to disclose
- 7 weeks(47 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.