MalwareEducationEducationRansomwareCapture Stored DataSupply Chain (3P Vendor)Ransom DemandedRansom PaidData ExfiltratedCustomer Data InvolvedIdentity (basic)Health (basic)MinorMediumResolved

Wildwood School, Inc.

bd_c89b73baed56c05d · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jan 19, 2021

To disclose

—

Affected

Not disclosed

Confidence

83%

Full breach record for Wildwood School, Inc. →

Wildwood School notified affected individuals of a data breach stemming from a ransomware attack on its third-party fundraising software provider, Blackbaud. The cyber-criminal had access to backup files between approximately February and May 20, 2020. Exposed data included names, phone numbers, addresses, dates of birth, and medical vaccination records for both adults and minors. Blackbaud paid a ransom and no evidence of misuse was reported.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 20, 2020

Begins

Jan 19, 2021

Filed

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Wildwood School, Inc.
norm: wildwood school

Name: Wildwood School, Inc.
norm: wildwood school
Industry: Educationllm

Discovered: —
Breach occurred: Feb 20, 2020 – May 20, 2020
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Health (basic)Minor
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Blackbaud, in conjunction with the FBI, investigated the incident
Third party: via Blackbaud
Initial access: supply_chain

During the incident: Wildwood received notice of this incident in July 2020 and immediately took action to understand the potential exposure and scope of personal data
Retained counsel to assist and advise
Blackbaud, in conjunction with the FBI, investigated the incident
Blackbaud paid a ransom to the cyber-criminal under the assurance that any exfiltrated files would be destroyed
Blackbaud's system was fully restored after ransom payment
Blackbaud conducted vigilant monitoring post-incident
Changes made: Blackbaud has already implemented changes to their data security protocols to prevent a similar incident from occurring again
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-537256
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 19, 2021
Raw hash: 167f9fa9ab567df2a3df841a1eb850f7e038edf1bc4709b2f91e641699dfb26f

Reporting entityWildwood School, Inc.

Victim entityWildwood School, Inc.

IncidentRansomware

Stated responseWildwood received notice of this incident in July 2020 and immediately took action to understand the potential exposure and scope of personal data

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov