MalwareOtherRansomwareRansom DemandedRansom PaidData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)PIIMediumContained

Crisis Center of Central New Hampshire

bd_e3ebdd93cc897b58 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 16, 2020

Filed

Aug 26, 2020

To disclose

6 weeks

Affected

2,000state residents only

Confidence

66%

Full breach record for Crisis Center of Central New Hampshire →

Crisis Center of Central New Hampshire (CCCNH) notified the NH AG of a ransomware attack on its vendor, Blackbaud, in May 2020. The attack compromised donor names, addresses, phone numbers, and emails for approx. 2,000 NH residents. No financial or SSN data was accessed. CCCNH notified donors in Aug 2020 and reported to credit bureaus.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 76 days

discovery → filing · 6 weeks / 41 days

May 1, 2020

Begins

Jul 16, 2020

Discovered

Aug 26, 2020

Filed

vs. sector median

1 wks faster

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2,000 affectedView incident

Name: Devine, Millimet & Branch, P.A
norm: devine millimet branch

Name: Crisis Center of Central New Hampshire
norm: crisis center of central new hampshire
Industry: Otherllm

Discovered: Jul 16, 2020
Breach occurred: May 1, 2020 – May 31, 2020
Undetected for: 76 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 13, 2020
Affected individuals: 2,000state-resident count only
Data types: Identity (basic)PII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of Attorney General

During the incident: Notified affected individuals by email on August 13, 2020
Notified affected individuals by regular mail on August 14, 2020
Provided notice to Experian, Equifax, and TransUnion
Changes made: Continuing to review and enhance security procedures and measures
Blackbaud engaged a leading cybersecurity firm to support investigation and response
Blackbaud coordinated with law enforcement
Blackbaud implemented additional security controls and system hardening procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(41 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/crisis-center-central-nh-20200826.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 26, 2020
Raw hash: ae62dad691b2e4b608c163a32ec2f3cf47245729d7632d36ba79793196a0e54f

Reporting entityDevine, Millimet & Branch, P.A

Victim entityCrisis Center of Central New Hampshire

Incidentdiscovered Jul 16, 2020

Stated responseNotified affected individuals by email on August 13, 2020

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov