MalwareOtherRansomwareRansom DemandedRansom PaidData ExfiltratedSupply Chain (3P Vendor)PIIIdentity (basic)FinancialMediumContained

American Symphony Orchestra League

bd_a287ccaa3bf10c66 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 1, 2020

Filed

Oct 9, 2020

To disclose

10 weeks

Affected

1,355state residents only

Linked

2 filings

Confidence

66%

Full breach record for American Symphony Orchestra League →4 incidents on file

American Symphony Orchestra League reported a ransomware attack on third-party vendor Blackbaud in May 2020. Attackers exfiltrated donor PII (names, addresses, donation history) before being expelled. Blackbaud paid ransom and confirmed data destruction. 1,355 Washington residents affected. Notifications sent in October 2020.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d10 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 92 days

discovery → filing · 10 weeks / 69 days

May 1, 2020

Begins

Aug 1, 2020

Discovered

Oct 9, 2020

Filed

vs. sector median

+3 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Montana State AGbd_6ce5fff4f38f66532020-10-05 · +4dCandidate

Name: Pryor Cashman LLP
norm: pryor cashman

Name: American Symphony Orchestra League
norm: american symphony orchestra league
Domain: americanorchestras.org
Industry: Otherllm

Discovered: Aug 1, 2020
Breach occurred: May 1, 2020
Undetected for: 92 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 5, 2020
Affected individuals: 1,355state-resident count only
Data types: PIIIdentity (basic)Financial
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified Washington State Office of the Attorney General

During the incident: Engaged independent forensic experts
Notified law enforcement
Expelled intruders from system
Sent notification to affected individuals
Sent notification to credit reporting agencies
Changes made: Testing by multiple third parties to ensure fix withstands known attack tactics
Enhancements to access management
Network segmentation
Deployment of additional endpoint and network-based platforms
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(69 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGOct 5 · first

Washington State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10337.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 9, 2020
Raw hash: 502842c440e19e50bb55debf07d7dff4bdb6b12432e3c058c5caf7ca0cb6db40

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityPryor Cashman LLP

Victim entityAmerican Symphony Orchestra League

Incidentdiscovered Aug 1, 2020

Stated responseEngaged independent forensic experts

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com