MalwareRansomwareSupply Chain (3P Vendor)Data ExfiltratedRansom DemandedRansom PaidData EncryptedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
La Jolla Country Day School
bd_c12b1bec3f1f4c83 · schema v1 · pii pii-v1
Full breach record for La Jolla Country Day School →La Jolla Country Day School reported a data breach involving its third-party vendor, Blackbaud. A ransomware attack occurred between February 20, 2020, and May 20, 2020. The incident exposed personal information including names, addresses, phone numbers, birth dates, and Social Security numbers or Taxpayer Identification Numbers. The school notified affected individuals and offered 24 months of credit monitoring. The FBI was engaged, and a ransom was paid.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_a4f6f4278999492eMaine State AGfiled 2021-03-04(1d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-538837
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 3, 2021
- Raw hash
- 688e8bc9bc1d66198ae4c6622daa94b3f865c45329a328c5ed2dd3a840aa6d03
Reporting entity
- Name
- La Jolla Country Day Schoolnorm: la jolla country day school
Victim entity
- Name
- La Jolla Country Day Schoolnorm: la jolla country day school
Incident
- Discovered
- Sep 29, 2020
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed breach notification with California Office of the Attorney General
- Third party
- via Blackbaud
- Initial access
- supply_chain
Compliance
- Time to disclose
- 22 weeks(155 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.