HackingEducationEducationSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDHighResolved

Fort Hays State University Foundation

bd_f2bfd9f35ba072fc · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 25, 2021

Filed

Apr 16, 2021

To disclose

7 weeks

Affected · nationwide

53,65032 in this filing

Linked

5 filings

Confidence

50%

Full breach record for Fort Hays State University Foundation →4 incidents on file

Fort Hays State University Foundation reported a data breach affecting 32 Maine residents due to a security incident at its third-party vendor, Blackbaud, Inc. The breach occurred between February 7, 2020, and May 20, 2020, and was discovered on February 25, 2021. The compromised information includes names and Social Security numbers. The foundation offered 24 months of credit monitoring and identity theft protection services through Kroll.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Feb 25, 2021 → Filed with AG Apr 16, 202150d ⏱ ME AG >30d7 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 384 days

discovery → filing · 7 weeks / 50 days

Feb 7, 2020

Begins

Feb 25, 2021

Discovered

Apr 16, 2021

Filed

vs. sector median

1 wks faster

This filing is one of 5 about the same incident.View merged incident

Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Oregon State AGbd_05a22e6205fcfbfb2021-04-16Candidate
Indiana State AGbd_316059aa27517d3f2021-04-16Verified
California State AGbd_342acd5f7ba86b642021-04-16Verified
New Hampshire State AGbd_2696b92e1072e84b2021-04-19 · +3dVerified

Name: Fort Hays State University Foundation
norm: fort hays state university

Name: Fort Hays State University Foundation
norm: fort hays state university
Industry: Educationllm

Discovered: Feb 25, 2021
Breach occurred: Feb 7, 2020 – May 20, 2020
Undetected for: 384 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 16, 2021
Affected individuals: 53,650state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Third-Party / Supply Chain

Changes made: 24 Months of credit monitoring and identity theft protection services offered by Kroll.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(50 days from discovery to filing)
Compliance flags: ME AG >30d · 50d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Feb 25, 2021
→ Filed with AG: Apr 16, 2021
50d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Feb 25, 2021 → Filed with AG: Apr 16, 2021	50d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Oregon State AGApr 16 · first

Indiana State AGApr 16 · first

California State AGApr 16 · first

Maine State AGApr 16 · first · this page

New Hampshire State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/93d92f71-2edc-4067-8945-74ef8fa177cf.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 16, 2021
Raw hash: 191a6ebcc7f3f0490cc87274d481378b07a5111815a259d2cf2b8a729fec8c49

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityFort Hays State University Foundation

Victim entityFort Hays State University Foundation

Incidentdiscovered Feb 25, 2021

Stated response24 Months of credit monitoring and identity theft protection services offered by Kroll.

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov