MalwareEducationEducationRansomwareCapture Stored DataSupply Chain (3P Vendor)Data ExfiltratedRansom DemandedData EncryptedCustomer Data InvolvedPIIIdentity (basic)LowResolved

The New Hampton School

bd_8a53006b6aa4b1ea · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 16, 2020

Filed

Jan 11, 2021

To disclose

26 weeks

Affected

3state residents only

Linked

5 filings

Confidence

66%

Full breach record for The New Hampton School →

New Hampton School notified affected individuals of a ransomware attack on third-party vendor Blackbaud. Data was exfiltrated between Feb 7 and May 20, 2020. PII was compromised. New Hampton engaged forensic investigators and offered 24 months of credit monitoring. 17 Rhode Island residents were impacted.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 160 days

discovery → filing · 26 weeks / 179 days

Feb 7, 2020

Begins

Jul 16, 2020

Discovered

Jan 11, 2021

Filed

This filing is one of 5 filings about the same incident.View merged incident

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_302f77c076bc392d2021-01-11Verified
Maine State AGbd_aa12622b18ccb9472021-01-14 · +3dVerified by operator
New Hampshire State AGbd_039fa314946e593e2021-01-19 · +8dVerified
Massachusetts State AGbd_100089e9e4e4ae8f2021-01-22 · +11dVerified

Name: The New Hampton School
norm: the new hampton school

Name: The New Hampton School
norm: the new hampton school
Industry: Educationllm

Discovered: Jul 16, 2020
Breach occurred: Feb 7, 2020 – May 20, 2020
Undetected for: 160 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 3state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Third party: via Blackbaud
Initial access: supply_chain

During the incident: Commenced an immediate and thorough investigation
Engaged external cybersecurity professionals
Engaged forensic experts and law enforcement
Paid the cybercriminal to ensure that the backup file was permanently destroyed
Providing you with access to Single Bureau Credit Monitoring services at no charge
Providing you with proactive fraud assistance
Changes made: Fix the vulnerability associated with this incident
Accelerating their efforts to further harden their environment through enhancements to access management
Network segmentation
Deployment of additional endpoint and network-based platforms
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 weeks(179 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGJan 11 · first

Montana State AGJan 11 · first · this page

Maine State AG+3d

New Hampshire State AG+8d

Massachusetts State AG+11d

Pattern: first filing Jan 11 (IN), last Jan 22 (MA) — a 11-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Hampton-Notif.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 11, 2021
Raw hash: 58a272a556a9e315001e67b4ddf1b1c8105f171cbe032ec677ad880e46b40543

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityThe New Hampton School

Victim entityThe New Hampton School

Incidentdiscovered Jul 16, 2020

Stated responseCommenced an immediate and thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov