MalwareEducationEducationRansomwareData ExfiltratedData EncryptedSupply Chain (3P Vendor)Identity (basic)Government IDMediumContained

Greenfield Community College

bd_b563b8ad01c23d3d · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Oct 19, 2020

To disclose

—

Affected

15state residents only

Linked

5 filings

Confidence

67%

Full breach record for Greenfield Community College →

Greenfield Community College Foundation notified individuals of a ransomware incident affecting third-party vendor Blackbaud in May 2020. The incident resulted in data exfiltration. Affected data included names, addresses, dates of birth, and Social Security numbers. The Foundation offered one year of Experian IdentityWorks credit monitoring. 48 Rhode Island residents were identified as affected.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Oct 19, 2020

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 5 about the same incident.View merged incident

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_1c7fd01d6c7b8a512020-10-19Verified
Maine State AGbd_1d57a656a2d82f6e2020-10-19Candidate
New Hampshire State AGbd_271ddc2bd52c2f6c2020-10-19Verified
Massachusetts State AGbd_382f02f22ab3d0af2020-10-19Verified

Name: Greenfield Community College
norm: greenfield community college

Name: Greenfield Community College
norm: greenfield community college
Industry: Educationllm

Discovered: —
Materiality determined: —
Notification sent: Oct 14, 2020
Affected individuals: 15state-resident count only
Data types: Identity (basic)Government ID
Data elements: Date of birth
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Third party: via Blackbaud, Inc.

During the incident: Offering a complimentary one-year membership of Experian IdentityWorks SM Credit 3B
Reviewed internal records to identify who may have been affected
Worked with Blackbaud to obtain additional information about the nature of the event
Changes made: Reviewing relationship with Blackbaud
Reviewing technical controls they have in place for securing our data
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGOct 19 · first

Maine State AGOct 19 · first

New Hampshire State AGOct 19 · first

Massachusetts State AGOct 19 · first

Montana State AGOct 19 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Greenfield-Notif.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 19, 2020
Raw hash: d660841d9579aebaec1c1187586778ac4d839c6e57b5e5ec91f03c151c45543a

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityGreenfield Community College

Victim entityGreenfield Community College

IncidentThird-Party / Supply Chain

Stated responseOffering a complimentary one-year membership of Experian IdentityWorks SM Credit 3B

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov