MalwareEducationEducationRansomwareSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

St. Mark's School of Texas

bd_ba6246afe6b0f5bf · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jun 28, 2021

To disclose

—

Affected

1state residents only

Confidence

66%

Full breach record for St. Mark's School of Texas →2 incidents on file

St. Mark’s School of Texas notified the NH Attorney General of a security incident involving its vendor, Blackbaud, Inc. In July 2020, Blackbaud discovered and stopped a ransomware attack that accessed files containing personal information, including Social Security numbers, of approximately one New Hampshire resident. St. Mark’s notified affected individuals on June 8, 2021, and provided two years of identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 1, 2020

Begins

Jun 28, 2021

Filed

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: St. Mark's School of Texas
norm: st mark s school of texas
Domain: smtexas.org

Name: St. Mark's School of Texas
norm: st mark s school of texas
Domain: smtexas.org
Industry: Educationllm

Discovered: —
Breach occurred: Jul 1, 2020 – Jul 31, 2020
Materiality determined: —
Notification sent: Jun 8, 2021
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security numberDate of birth
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified Office of the New Hampshire Attorney General
Third party: via Blackbaud, Inc.
Initial access: supply_chain

During the incident: Notified all impacted constituents
Provided written notification to all impacted individuals by U.S. first class mail
Provided two years of identity protection services, including credit monitoring, free of charge
Worked closely with legal counsel that specializes in cyber-crime
Engaged independent technology systems specialists to conduct threat assessment and penetration testing
Changes made: Conducted threat assessment and penetration testing of systems, networks, and protocols on campus
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/st-marks-texas-20210628.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 28, 2021
Raw hash: d353645829865212a8cc6a7e0ecf7b4f7714537ecedb796ee7827bb8b0cf59ce

Reporting entitySt. Mark's School of Texas

Victim entitySt. Mark's School of Texas

IncidentThird-Party / Supply Chain

Stated responseNotified all impacted constituents

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov