MalwareRansomwareSupply Chain (3P Vendor)Customer Data InvolvedRansom DemandedIDENTITY_BASICIDENTITY_GOVERNMENTHighResolved
ROEPER CITY AND COUNTRY SCHOOL, INC.
bd_a9b5ccfb40cd1cb7 · schema v1 · pii pii-v1
Full breach record for ROEPER CITY AND COUNTRY SCHOOL, INC. →Roeper City & Country School reported that a ransomware attack on its third-party service provider, Blackbaud, resulted in a data breach affecting 1,675 individuals. The incident, which occurred on May 1, 2020 and was discovered December 17, 2020, compromised names and driver's license numbers. The school notified affected individuals on December 23, 2020 and offered two years of complimentary credit and identity monitoring services.
Maine clockDiscovered Dec 17, 2020 → Filed with AG Dec 23, 20206d ✓ ME AG ≤30d6 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,675 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ed89ca4b-ae29-4317-bab1-87f5c190cd93.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 23, 2020
- Raw hash
- f57a718492b20903a6b0903fc8da842877039a6863776526ed1a25a1a9f8f8e2
Reporting entity
- Name
- ROEPER CITY AND COUNTRY SCHOOL, INC.norm: roeper city and country school
Victim entity
- Name
- ROEPER CITY AND COUNTRY SCHOOL, INC.norm: roeper city and country school
Incident
- Discovered
- Dec 17, 2020
- Materiality determined
- —
- Notification sent
- Dec 23, 2020
- Affected individuals
- 1,675
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Initial access
- supply_chain
Compliance
- Time to disclose
- 6 days(6 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 6d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 17, 2020→ Filed with AG: Dec 23, 20206d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.