DisclosureLens
MalwareEducationEducationRansomwareSupply Chain (3P Vendor)Data EncryptedTargetedIdentity (basic)PIIMediumContained

Minnesota State University Mankato Foundation

bd_b99a66c3c3357ee4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 16, 2020

Filed

Sep 18, 2020

To disclose

9 weeks

Affected

1,134state residents only

Confidence

69%
Full breach record for Minnesota State University Mankato Foundation →

Minnesota State University, Mankato Foundation reported a ransomware attack on third-party provider Blackbaud, Inc. occurring between Feb 7 and May 20, 2020. The Foundation was notified on July 16, 2020. 1,134 Washington residents were affected. Compromised data included names, addresses, phone numbers, emails, and dates of birth. No SSNs or financial account data were compromised.

Washington clock⏱ WA AG >30d9 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 160 days
discovery → filing · 9 weeks / 64 days

Feb 7, 2020

Begins

Jul 16, 2020

Discovered

Sep 18, 2020

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,134 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.