MalwareEducationEducationRansomwareData ExfiltratedData EncryptedSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDMediumContained

The Madeira School, Inc.

bd_8bb1e8e458a9ac6a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 16, 2020

Filed

Dec 4, 2020

To disclose

20 weeks

Affected

3state residents only

Confidence

65%

Full breach record for The Madeira School, Inc. →2 incidents on file

Madeira School notified Montana residents of a third-party vendor (Blackbaud) ransomware incident. Data potentially accessed included names and SSNs. Incident occurred May 2020; Madeira notified July 2020. Notices sent Oct 2020 offering 24 months credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 76 days

discovery → filing · 20 weeks / 141 days

May 1, 2020

Begins

Jul 16, 2020

Discovered

Dec 4, 2020

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident

Name: The Madeira School, Inc.
norm: the madeira school
Domain: madeira.org

Name: The Madeira School, Inc.
norm: the madeira school
Domain: madeira.org
Industry: Educationllm

Discovered: Jul 16, 2020
Breach occurred: May 1, 2020 – May 20, 2020
Undetected for: 76 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 6, 2020
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notifying state regulators as required

During the incident: Working to review existing procedures regarding third-party vendors
Working with Blackbaud to address relevant questions and next steps
Notifying state regulators as required
Providing access to credit monitoring services for 24 months at no cost
Changes made: Blackbaud confirmed it will be removing historical unencrypted Madeira School information from its network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(141 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/madeSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 4, 2020
Raw hash: 2ac69b5c02286bdb1d0a41d44f08fef3d62345d26808a2c5e647089fb4bce2de

Reporting entityThe Madeira School, Inc.

Victim entityThe Madeira School, Inc.

Incidentdiscovered Jul 16, 2020

Stated responseWorking to review existing procedures regarding third-party vendors

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov