MalwareEducationEducationRansomwareRansom DemandedRansom PaidData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDMinorMediumResolved

St. Francis Catholic High School

bd_88ccf408a93fdd4c · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jan 22, 2021

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for St. Francis Catholic High School →

St. Francis Catholic High School notified the California AG of a data breach involving a third-party vendor, Blackbaud. A ransomware attack on Blackbaud resulted in the exfiltration of a 2007 backup file containing students' names, dates of birth, and Social Security numbers. Blackbaud paid the ransom and confirmed the data was destroyed. The school is offering 24 months of credit monitoring to affected families.

J jump to incidentP pin to compareR raw source

Incident timeline

May 1, 2020

Begins

Jan 22, 2021

Filed

This filing is one of 2 about the same incident.View merged incident

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

California State AGbd_9fa799992494623b2020-12-06 · +47dCandidate

Name: St. Francis Catholic High School
norm: st francis catholic high school

Name: St. Francis Catholic High School
norm: st francis catholic high school
Industry: Educationllm

Discovered: —
Breach occurred: May 1, 2020
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDMinor
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Third party: via Blackbaud

During the incident: Notifying affected families about this incident
Continuing to work with Blackbaud to make sure that no sensitive data has been removed from the database
Providing access to Single Bureau Credit Monitoring services at no charge for 24 months
Providing proactive fraud assistance
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

California State AGDec 6 · first

California State AG+47d · this page

Pattern: first filing Dec 6 (CA), last Jan 22 (CA) — a 47-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-537343
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 22, 2021
Raw hash: f922b25c196b618e8b799deb212256a773b3db874203d2abfaff93cd391db1b9

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entitySt. Francis Catholic High School

Victim entitySt. Francis Catholic High School

IncidentRansomware

Stated responseNotifying affected families about this incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov