MalwareEducationEducationRansomwareData ExfiltratedSupply Chain (3P Vendor)Ransom DemandedIdentity (basic)Government IDFinancial accountMediumContained

Wisconsin Evangelical Lutheran Synod

bd_a53e7ab37e226b90 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 16, 2020

Filed

Nov 19, 2020

To disclose

18 weeks

Affected

13state residents only

Confidence

66%

Full breach record for Wisconsin Evangelical Lutheran Synod →2 incidents on file

WELS notified of Blackbaud ransomware attack in May 2020. Incident involved legacy tables containing PII, SSN, DOB, and financial account numbers. Blackbaud engaged forensics and law enforcement. WELS is notifying affected individuals and offering credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 76 days

discovery → filing · 18 weeks / 126 days

May 1, 2020

Begins

Jul 16, 2020

Discovered

Nov 19, 2020

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed13 affectedView incident

Name: Wisconsin Evangelical Lutheran Synod
norm: wisconsin evangelical lutheran synod

Name: Wisconsin Evangelical Lutheran Synod
norm: wisconsin evangelical lutheran synod
Industry: Educationllm

Discovered: Jul 16, 2020
Breach occurred: May 1, 2020 – May 31, 2020
Undetected for: 76 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 13state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcement
Third party: via Blackbaud

During the incident: Notifying impacted individuals
Working with third party cybersecurity experts and law enforcement
Implementing a security fix
Offering credit monitoring
Changes made: Implemented additional safety protocols
Implemented a security fix
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(126 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/wiscoSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 19, 2020
Raw hash: f707f54cbb47f212db8570ba481ea60e5e93f717aa17559013fc05deff00d1a1

Reporting entityWisconsin Evangelical Lutheran Synod

Victim entityWisconsin Evangelical Lutheran Synod

Incidentdiscovered Jul 16, 2020

Stated responseNotifying impacted individuals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov