DisclosureLens
MalwareEducationEducationRansomwareRansom DemandedRansom PaidData ExfiltratedSupply Chain (3P Vendor)Government IDIdentity (basic)HighContained

The Derryfield School

bd_bc3a429a4a98fca5 · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Nov 30, 2020

To disclose

—

Affected

2,986

Confidence

68%
Full breach record for The Derryfield School →

Derryfield School notified the NH Attorney General of a third-party breach involving Blackbaud. The attacker, a cyber-criminal, encrypted data and demanded ransom, which was paid. Blackbaud subsequently discovered that Social Security Numbers and Tax ID numbers of 2,986 individuals (1,975 NH residents) were accessed. Derryfield is sending notification letters to affected individuals.

Incident timeline — partial

? — ?

Breach window unknown

Nov 30, 2020

Filed

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2,986 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.