MalwareEducationEducationRansomwarePhishingData EncryptedRansom DemandedEmployee Data InvolvedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHighContained

Ohio History Connection

bd_f6e7484647a602c9 · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Aug 23, 2023

To disclose

—

Affected

7,600

Linked

5 filings

Confidence

67%

Full breach record for Ohio History Connection →3 incidents on file

Ohio History Connection suffered a ransomware attack in early July 2023, encrypting internal data servers. Cybercriminals demanded a ransom in the millions. The breach potentially exposed names, addresses, and Social Security numbers of 7,600 current and former employees, vendors, and donors. OHC notified the FBI, retained forensic consultants, and is offering credit monitoring. Systems have been migrated to the cloud with enhanced security measures.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Jul 1, 2023

Begins

Aug 23, 2023

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitelockbit_3bd_15e2608dae4ada292023-07-27 · +27dVerified by operator
Leak Sitelockbit_3bd_cc0d34f222cd3fd22023-07-03 · +51dVerified by operator

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_67ba20458f527e6b2023-08-23Candidate
New Hampshire State AGbd_7a49cabfe1afd57c2023-08-23Verified by operator

Name: Ohio History Connection
norm: ohio history connection
Domain: ohiohistory.org

Name: Ohio History Connection
norm: ohio history connection
Domain: ohiohistory.org
Industry: Educationllm

Discovered: —
Breach occurred: Jul 1, 2023
Materiality determined: —
Notification sent: Aug 23, 2023
Affected individuals: 7,600nationwide
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1566 Phishing
Threat actor: ExternalFinancial
Regulator citations: Notified the FBI
Initial access: phishing_link

During the incident: Notified the FBI
Retained forensic IT consulting firms to assist in determining the extent of the data breach, reconstructing its systems and restoring data
Employed a consultant that specializes in communicating with groups who engage in cybercriminal activity to determine the amount the group was demanding and assess the extent of the data actually accessed, encrypted and released
Providing free credit monitoring services for one year/two years for anyone involved
Notified all three national credit reporting agencies
Changes made: Moved a vast majority of its data to cloud-based services
Implemented new security systems, features and measures intended to reduce its vulnerability to future attacks
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >30d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGAug 23 · first

New Hampshire State AGAug 23 · first

Vermont State AGAug 23 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-08-23-ohio-historical-society-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 23, 2023
Raw hash: 85206c2d16230be3531eedc50da908130d824522e5c6658221d123233d3ec87d

Linked disclosures

Ransomware claims (2)

Regulatory filings (2) · sorted by filing gap

Reporting entityOhio History Connection

Victim entityOhio History Connection

IncidentRansomware

Stated responseNotified the FBI

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov