MalwareRansomwareSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Marines' Memorial Association & Foundation
bd_d2fe0527402c5747 · schema v1 · pii pii-v1
Full breach record for Marines' Memorial Association & Foundation →Marines' Memorial Association & Foundation notified members of a data breach involving third-party vendor Blackbaud. In May 2020, Blackbaud experienced a ransomware incident resulting in system encryption and potential data exfiltration. Marines' Memorial became aware of the incident on July 16, 2020. Affected data may include names, addresses, and financial information. The organization is offering one year of credit monitoring and reviewing third-party vendor policies.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_0a5a7a3341869b7bMontana State AGfiled 2021-04-06Candidate
- bd_1df75684dd9eff16Washington State AGfiled 2021-04-06Verified by operator
- bd_67ac2d4038cabcecMaine State AGfiled 2021-04-06Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-539752
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 6, 2021
- Raw hash
- 3963c1dcc34f54052356b9ef1939b8d7f4ddd02ff153bd3b56de025c1125aec6
Reporting entity
- Name
- Marines' Memorial Association & Foundationnorm: marines memorial
Victim entity
- Name
- Marines' Memorial Association & Foundationnorm: marines memorial
Incident
- Discovered
- Jul 16, 2020
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notifying state regulators, as required
- Third party
- via Blackbaud, Inc.
- Initial access
- supply_chain
Compliance
- Time to disclose
- 38 weeks(264 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.