MalwareRansomwareSupply Chain (3P Vendor)Ransom DemandedCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTHigh
GEORGETOWN DAY SCHOOL, INC
bd_e0d9590c92675c72 · schema v1 · pii pii-v1
Full breach record for GEORGETOWN DAY SCHOOL, INC →Georgetown Day School reported a data breach impacting 2,130 individuals due to a ransomware attack on its third-party service provider, Blackbaud, Inc. The incident, which occurred between May 14 and May 20, 2020, was discovered on November 19, 2020. The compromised information included names and Social Security numbers. Affected individuals were notified on December 24, 2020, and offered 24 months of credit monitoring and identity restoration services.
Maine clockDiscovered Nov 19, 2020 → Filed with AG Dec 24, 202035d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2,130 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/26cfb969-9bd9-4f12-a569-ef3b9b6a1cd7.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 24, 2020
- Raw hash
- 0e8b76c5971b5eeab6070b3a77da1661d36d7034dcfdf359f62b7fce3f776630
Reporting entity
- Name
- GEORGETOWN DAY SCHOOL, INCnorm: georgetown day school
Victim entity
- Name
- GEORGETOWN DAY SCHOOL, INCnorm: georgetown day school
Incident
- Discovered
- Nov 19, 2020
- Materiality determined
- —
- Notification sent
- Dec 24, 2020
- Affected individuals
- 2,130
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 5 weeks(35 days from discovery to filing)
- Compliance flags
- ME AG >30d · 35d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 19, 2020→ Filed with AG: Dec 24, 202035d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.