MalwareEducationEducationRansomwareSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedRansom DemandedIdentity (basic)Financial accountLowContained

The Buckley School

bd_d75b1b27e87117d5 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 16, 2020

Filed

Mar 15, 2021

To disclose

35 weeks

Affected

6state residents only

Confidence

66%

Full breach record for The Buckley School →2 incidents on file

The Buckley School notified the New Hampshire Attorney General of a data event involving its third-party vendor, Blackbaud. Blackbaud experienced a ransomware attack in May 2020, resulting in system encryption and potential unauthorized access to customer data. The Buckley School received notification from Blackbaud in July 2020 and completed its own review in February 2021. Approximately 6 New Hampshire residents were affected, with data potentially including names and financial account information. The school provided 24 months of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 76 days

discovery → filing · 35 weeks / 242 days

May 1, 2020

Begins

Jul 16, 2020

Discovered

Mar 15, 2021

Filed

vs. sector median

+26 wks slower

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed6 affectedView incident

Name: The Buckley School
norm: the buckley school

Name: The Buckley School
norm: the buckley school
Industry: Educationllm

Discovered: Jul 16, 2020
Breach occurred: May 1, 2020 – May 20, 2020
Undetected for: 76 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 11, 2021
Affected individuals: 6state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau
Third party: via Blackbaud
Initial access: supply_chain

During the incident: Buckley immediately commenced an investigation to better understand the incident and any impact on Buckley data
Buckley worked diligently to gather further information from Blackbaud
Buckley conducted an extensive manual review of source documents and internal records
Buckley provided written notice of this incident to approximately six (6) New Hampshire residents
Buckley is offering individuals access to complimentary credit monitoring services through CyberScout for 24 months
Changes made: Buckley is reviewing its existing procedures regarding its third-party vendors
Buckley is working with Blackbaud to ensure additional measures and safeguards are in place to protect against this type of incident in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 35 weeks(242 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/buckley-20210315.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 15, 2021
Raw hash: bf73a94800908469b6be0bc294c6b99ddd318a22b5105f93dfcbea3fe63550dc

Reporting entityThe Buckley School

Victim entityThe Buckley School

Incidentdiscovered Jul 16, 2020

Stated responseBuckley immediately commenced an investigation to better understand the incident and any impact on Buckley data

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov