DisclosureLens
HackingOtherCustomer Data InvolvedPIIGovernment IDHighResolved

Wisconsin Evangelical Lutheran Synod

bd_f6087d403309c14e · schema v1 · pii pii-v1

Severity

High

Discovered

Sep 29, 2020

Filed

Nov 19, 2020

To disclose

7 weeks

Affected · nationwide

7,5381 in this filing

Linked

5 filings

Confidence

50%
Full breach record for Wisconsin Evangelical Lutheran Synod →2 incidents on file

Wisconsin Evangelical Lutheran Synod, a non-profit organization, reported a data breach affecting 7,538 individuals, including one resident of Maine. The breach, which occurred on May 1, 2020, and was discovered on September 29, 2020, was described as an external system breach or hacking incident. The compromised information included names or other personal identifiers in combination with Social Security Numbers. The organization provided written notification to affected individuals on November 24, 2020, and offered two years of identity theft protection services through CyberScout.

Maine clockDiscovered Sep 29, 2020 → Filed with AG Nov 19, 202051d ⏱ ME AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 151 days
discovery → filing · 7 weeks / 51 days

May 1, 2020

Begins

Sep 29, 2020

Discovered

Nov 19, 2020

Filed

vs. sector median

+1 wks slower

This filing is one of 5 filings about the same incident.View merged incident
Part of BLACKBAUD, INC. supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Washington State AGAug 10 · first
Indiana State AG+80d
New Hampshire State AG+101d
Massachusetts State AG+101d
Maine State AG+101d · this page

Pattern: first filing Aug 10 (WA), last Nov 19 (ME) — a 101-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.