MalwareOtherRansomwareSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedPIIIdentity (basic)Financial accountLowContained

Marines' Memorial Association & Foundation

bd_d2fe0527402c5747 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 16, 2020

Filed

Apr 6, 2021

To disclose

38 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

66%

Full breach record for Marines' Memorial Association & Foundation →

Marines' Memorial Association & Foundation notified members of a data breach involving third-party vendor Blackbaud. In May 2020, Blackbaud experienced a ransomware incident resulting in system encryption and potential data exfiltration. Marines' Memorial became aware of the incident on July 16, 2020. Affected data may include names, addresses, and financial information. The organization is offering one year of credit monitoring and reviewing third-party vendor policies.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 76 days

discovery → filing · 38 weeks / 264 days

May 1, 2020

Begins

Jul 16, 2020

Discovered

Apr 6, 2021

Filed

vs. sector median

+30 wks slower

This filing is one of 7 about the same incident.View merged incident

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Montana State AGbd_0a5a7a3341869b7b2021-04-06Candidate
Washington State AGbd_1df75684dd9eff162021-04-06Verified by operator
Indiana State AGbd_54cbdf830b24e1302021-04-06Verified
Maine State AGbd_67ac2d4038cabcec2021-04-06Verified by operator

Show 2 more filings ↓up to 6d gap

Massachusetts State AGbd_e797f03f5607a3212021-04-06Verified
New Hampshire State AGbd_24a6df15990249932021-04-12 · +6dVerified

Name: Marines' Memorial Association & Foundation
norm: marines memorial

Name: Marines' Memorial Association & Foundation
norm: marines memorial
Industry: Otherllm

Discovered: Jul 16, 2020
Breach occurred: May 1, 2020 – May 20, 2020
Undetected for: 76 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Financial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1195 Supply Chain Compromise
Threat actor: External
Regulator citations: Notifying state regulators, as required
Third party: via Blackbaud, Inc.
Initial access: supply_chain

During the incident: Commenced an investigation to better understand the nature and scope of the incident
Worked with forensic investigators to gather further information from Blackbaud
Reviewing existing policies and procedures regarding programs and services provided by third-party vendors
Working with Blackbaud to confirm they have implemented additional measures and safeguards
Offering 1 year of complimentary credit monitoring and identity protection services through Experian
Notifying state regulators, as required
Changes made: Reviewing existing policies and procedures regarding programs and services provided by third-party vendors
Working with Blackbaud to confirm they have implemented additional measures and safeguards to protect against this type of incident in the future
Continuing to evaluate, monitor, and update all information systems and cyber protection tools
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 38 weeks(264 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Montana State AGApr 6 · first

Washington State AGApr 6 · first

Indiana State AGApr 6 · first

Maine State AGApr 6 · first

Massachusetts State AGApr 6 · first

California State AGApr 6 · first · this page

New Hampshire State AG+6d

Pattern: first filing Apr 6 (MT), last Apr 12 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-539752
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 6, 2021
Raw hash: 3963c1dcc34f54052356b9ef1939b8d7f4ddd02ff153bd3b56de025c1125aec6

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityMarines' Memorial Association & Foundation

Victim entityMarines' Memorial Association & Foundation

Incidentdiscovered Jul 16, 2020

Stated responseCommenced an investigation to better understand the nature and scope of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov