MalwareRansomwareData EncryptedData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Darlington School
bd_d5323f86c2b07092 · schema v1 · pii pii-v1
Full breach record for Darlington School →Darlington School, an educational institution in Rome, Georgia, reported a ransomware event involving its third-party provider, Blackbaud. The breach occurred between May 14 and May 20, 2020, and was discovered on December 4, 2020. The incident compromised the Social Security Numbers of approximately 1,854 individuals, including one Maine resident. The school provided 24 months of credit and identity monitoring services to affected parties.
Maine clockDiscovered Dec 4, 2020 → Filed with AG Dec 30, 202026d ✓ ME AG ≤30d26 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,854 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/cc226921-32db-443c-8482-71d207fb0a7c.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 30, 2020
- Raw hash
- 55b4f9faa15476e614006427b790dfc2b0620d89a546bce127a3533e6231142f
Reporting entity
- Name
- Darlington Schoolnorm: darlington school
- Domain
- darlingtonschool.org
- Industry
- Education
Victim entity
- Name
- Darlington Schoolnorm: darlington school
- Domain
- darlingtonschool.org
- Industry
- Education
Incident
- Discovered
- Dec 4, 2020
- Materiality determined
- —
- Notification sent
- Dec 30, 2020
- Affected individuals
- 1,854
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- external_remote_services
Compliance
- Time to disclose
- 26 days(26 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 26d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 4, 2020→ Filed with AG: Dec 30, 202026d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.