MalwareEducationTechnologyEducationRansomwareRansom DemandedRansom PaidData ExfiltratedSupply Chain (3P Vendor)PIIIdentity (basic)Government IDMediumContained

Light of Christ Catholic Schools

bd_b0200493c0d61f07 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 29, 2020

Filed

Jan 25, 2021

To disclose

17 weeks

Affected

6state residents only

Confidence

63%

Full breach record for Light of Christ Catholic Schools →

Light of Christ Catholic Schools notified employees that third-party vendor Blackbaud suffered a ransomware attack between Feb-May 2020. Unencrypted PII including SSNs was exposed. Blackbaud paid ransom, restored systems, and offered 24 months credit monitoring. Incident discovered Sept 29, 2020.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 241 days

discovery → filing · 17 weeks / 118 days

Feb 1, 2020

Begins

Sep 29, 2020

Discovered

Jan 25, 2021

Filed

vs. sector median

+8 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed6 affectedView incident

Name: Light of Christ Catholic Schools
norm: light of christ catholic schools

Name: Light of Christ Catholic Schools
norm: light of christ catholic schools
Industry: EducationllmTechnologyllm

Discovered: Sep 29, 2020
Breach occurred: Feb 1, 2020 – May 20, 2020
Undetected for: 241 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 1, 2020
Affected individuals: 6state-resident count only
Data types: PIIIdentity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: investigated the incident in conjunction with the FBI

During the incident: Halt further system access
Investigated the incident in conjunction with the FBI
Paid a ransom to the cyber-criminal
Fully restored system after ransom payment
Implemented changes to their data security protocols
Offering free credit monitoring and fraud assistance services for 24 months
Changes made: Implemented changes to their data security protocols to prevent a similar incident from occurring again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(118 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Light-of-Christ-Catholic-Schools-Ad-SSN-Only-Updated-r2prf.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 25, 2021
Raw hash: 3825d24a626d514ff48e8f716fe71a00ca6c28c6ec8422136e35e56da4673c60

Reporting entityLight of Christ Catholic Schools

Victim entityLight of Christ Catholic Schools

Incidentdiscovered Sep 29, 2020

Stated responseHalt further system access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov