MalwareEducationEducationRansomwareCapture Stored DataRansom DemandedRansom PaidData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedDelayed DiscoveryPIIIdentity (basic)EmploymentBehaviorLowContained

Santa Rosa Junior College Foundation

bd_bb111256b23a172b · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Aug 19, 2020

To disclose

—

Affected

Not disclosed

Confidence

72%

Full breach record for Santa Rosa Junior College Foundation →

Santa Rosa Junior College Foundation notified constituents that its third-party database provider Blackbaud suffered a ransomware attack discovered in May 2020. Data potentially compromised included contact information, employer information, gender, date of birth, spouse identity, and relationship/giving history. No credit card, bank account, or SSN data was at risk. Blackbaud paid the ransom and received confirmation the copied data was destroyed.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 3, 2020

Begins

Aug 19, 2020

Filed

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Santa Rosa Junior College Foundation
norm: santa rosa junior college
Domain: srjc.planmygift.org

Name: Santa Rosa Junior College Foundation
norm: santa rosa junior college
Domain: srjc.planmygift.org
Industry: Educationllm

Discovered: —
Breach occurred: Feb 3, 2020 – May 1, 2020
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)EmploymentBehavior
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1074 Data StagedT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Third party: via Blackbaud

During the incident: Notified affected community members of the Blackbaud incident
Blackbaud hired a third-party team of experts to monitor the dark web as an extra precautionary measure
Blackbaud met the cybercriminal's ransomware demand to protect against further compromise and mitigate potential identity theft
Blackbaud involved law enforcement and cybersecurity experts
Seeking additional information from Blackbaud regarding delay in notification, confidence in data destruction, and additional security measures
Changes made: Continuing to take measures to understand the full scope of this attack
Continuing to protect the personal information of our community members
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-193257
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 19, 2020
Raw hash: b802d1cec7af53d8f6b8d1a5fc4c6ab87d77a1167e553d63e8c603161e6390b7

Reporting entitySanta Rosa Junior College Foundation

Victim entitySanta Rosa Junior College Foundation

IncidentRansomware

Stated responseNotified affected community members of the Blackbaud incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov