MalwareEducationEducationRansomwareSupply Chain (3P Vendor)Data EncryptedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

THE LATIN SCHOOL OF CHICAGO

bd_b03b8f2d21fc6e08 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 29, 2020

Filed

Oct 30, 2020

To disclose

4 weeks

Affected

1state residents only

Linked

4 filings

Confidence

64%

Full breach record for THE LATIN SCHOOL OF CHICAGO →4 incidents on file

The Latin School of Chicago notified Montana residents of a ransomware attack on third-party provider Blackbaud in May 2020. In September 2020, Blackbaud disclosed that unencrypted tables containing names, DOBs, and SSNs were accessed. Latin is offering 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 151 days

discovery → filing · 4 weeks / 31 days

May 1, 2020

Begins

Sep 29, 2020

Discovered

Oct 30, 2020

Filed

This filing is one of 4 filings about the same incident.View merged incident

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_66e9848af9eac6a82020-10-28 · +2dVerified
New Hampshire State AGbd_6e8d79cb6b0c5feb2020-10-27 · +3dVerified
Maine State AGbd_cd2f7d9961961e9f2020-10-24 · +6dCandidate

Name: THE LATIN SCHOOL OF CHICAGO
norm: the latin school of chicago
Domain: latinschool.org

Name: THE LATIN SCHOOL OF CHICAGO
norm: the latin school of chicago
Domain: latinschool.org
Industry: Educationllm

Discovered: Sep 29, 2020
Breach occurred: May 1, 2020 – May 31, 2020
Undetected for: 151 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Third party: via Blackbaud
Initial access: valid_credentials

During the incident: Notifying impacted individuals
Working with third party cybersecurity experts and law enforcement
Offering credit monitoring services
Changes made: Provider implemented security fix
Provider implemented additional safety protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGOct 24 · first

New Hampshire State AG+3d

Massachusetts State AG+4d

Montana State AG+6d · this page

Pattern: first filing Oct 24 (ME), last Oct 30 (MT) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/latinSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 30, 2020
Raw hash: 85cc18773cb97b9fa3008e98fb4e9f1d5a786d7cbc83e1011ac77f284784ac70

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityTHE LATIN SCHOOL OF CHICAGO

Victim entityTHE LATIN SCHOOL OF CHICAGO

Incidentdiscovered Sep 29, 2020

Stated responseNotifying impacted individuals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov