MalwareEducationEducationRansomwareRansom DemandedRansom PaidData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedPIIIdentity (basic)MediumContained

Gallaudet University

bd_e0a0ee5d970ade00 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 1, 2020

Filed

Oct 1, 2020

To disclose

13 weeks

Affected

1,195state residents only

Confidence

66%

Full breach record for Gallaudet University →

Gallaudet University reported a ransomware attack on third-party provider Blackbaud in May 2020. The attack resulted in the exfiltration of a backup copy containing donor information for 1,195 Washington residents, including names, contact info, and dates of birth. Blackbaud paid the ransom and confirmed the data was destroyed. Gallaudet notified the WA AG on Oct 1, 2020, and began notifying residents on Oct 2, 2020.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 61 days

discovery → filing · 13 weeks / 92 days

May 1, 2020

Begins

Jul 1, 2020

Discovered

Oct 1, 2020

Filed

vs. sector median

+5 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,195 affectedView incident

Name: Gallaudet University
norm: gallaudet university

Name: Gallaudet University
norm: gallaudet university
Industry: Educationllm

Discovered: Jul 1, 2020
Breach occurred: May 1, 2020 – May 31, 2020
Undetected for: 61 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 2, 2020
Affected individuals: 1,195state-resident count only
Data types: PIIIdentity (basic)
Data elements: NameDate of birth
WA-stated cause: Cyberattack
WA-stated duration: lifecycle Unknowndexposure 100-199d
WA-stated discovery: Found after the fact
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Regulator citations: Notified Washington State Attorney General’s Office
Third party: via Blackbaud
Initial access: supply_chain

During the incident: Launched an internal investigation
Reached out to Blackbaud to learn more about the incident
Began notifying Washington state residents via letter
Ensured that any notifications received in the future will immediately be relayed to the correct personnel
Changes made: Ensured that any notifications received in the future will immediately be relayed to the correct personnel
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(92 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10331.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 1, 2020
Raw hash: 11b8a2420c3b2b7a94667f2468a6427d7858ad426fc476652251ef800ea7725d

Reporting entityGallaudet University

Victim entityGallaudet University

Incidentdiscovered Jul 1, 2020

Stated responseLaunched an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com