MalwareEducationEducationRansomwareData ExfiltratedData EncryptedSupply Chain (3P Vendor)Customer Data InvolvedGovernment IDIdentity (basic)MediumContained

Hopkins School

bd_8e19b4c6797483ae · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 16, 2020

Filed

Nov 10, 2020

To disclose

17 weeks

Affected

23state residents only

Linked

4 filings

Confidence

66%

Full breach record for Hopkins School →

Hopkins School notified the New Hampshire Attorney General of a ransomware incident involving its cloud service provider, Blackbaud Inc. Unauthorized access and data exfiltration occurred between April 18 and May 7, 2020. While initial reports suggested data was encrypted, Blackbaud later confirmed that unencrypted Social Security numbers were accessed. 23 New Hampshire residents were affected. Hopkins provided one year of Experian IdentityWorks protection and notified the AG on November 9, 2020.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 89 days

discovery → filing · 17 weeks / 117 days

Apr 18, 2020

Begins

Jul 16, 2020

Discovered

Nov 10, 2020

Filed

vs. sector median

+8 wks slower

This filing is one of 4 about the same incident.View merged incident

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_433e95f55a73dbf52020-11-09 · +1dCandidate
Massachusetts State AGbd_863fab83c7b6cdac2020-11-09 · +1dVerified
Indiana State AGbd_e4236964d8ad41c72020-11-09 · +1dVerified

Name: Hopkins School
norm: hopkins school

Name: Hopkins School
norm: hopkins school
Industry: Educationllm

Discovered: Jul 16, 2020
Breach occurred: Apr 18, 2020 – May 7, 2020
Undetected for: 89 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 9, 2020
Affected individuals: 23state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General Gordon MacDonald
Third party: via Blackbaud Inc.
Initial access: supply_chain

During the incident: Provided complimentary identity theft protection services to the impacted individual through Experian
Reviewed its relationship with Blackbaud and the technical controls in place for securing Hopkins’ data in the Blackbaud systems
Mailed notification letters to these individuals on November 9, 2020
Changes made: Reviewing its relationship with Blackbaud and the technical controls in place for securing Hopkins’ data in the Blackbaud systems
Confirming Blackbaud’s technical, security and encryption controls for securing our data
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(117 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGNov 9 · first

Massachusetts State AGNov 9 · first

Indiana State AGNov 9 · first

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/hopkins-school-20201110.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 10, 2020
Raw hash: 3167c09349ea3f4d6e4193f037a4b8f3374b4c8b73d61b15a082313e17589a16

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityHopkins School

Victim entityHopkins School

Incidentdiscovered Jul 16, 2020

Stated responseProvided complimentary identity theft protection services to the impacted individual through Experian

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov