HackingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPIIMediumContained
The Episcopal Church
bd_faa9bfc58c889769 · schema v1 · pii pii-v1
Full breach record for The Episcopal Church →Episcopal Church Foundation (ECF) notified the NH DOJ of a cybersecurity incident involving its third-party IT vendor, Linear Technologies, Inc. ECF learned of unauthorized activity on Feb 17, 2025. The incident impacted 20 New Hampshire residents, exposing bank account numbers, health insurance info, medical info, and SSNs. ECF severed ties with the vendor, took systems offline, engaged forensic experts, and notified law enforcement. Notifications were sent on July 28, 2025, offering 24 months of credit monitoring.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_5e0ac4f183a6bec1Vermont State AGfiled 2025-07-28(2d gap)Verified
- bd_94b5f0476cdd0a6aIndiana State AGfiled 2025-07-28(2d gap)Verified
- bd_e7d214e043ade00aMaine State AGfiled 2025-07-28(2d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/episcopal-church-foundation-20250730.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 30, 2025
- Raw hash
- 9d1add3c9cb5f2f090d8998f1272fd6a0f57de76ac50ebbc1813dd4e738a6fba
Reporting entity
- Name
- The Episcopal Churchnorm: the episcopal church
- Domain
- episcopalchurch.org
Victim entity
- Name
- The Episcopal Churchnorm: the episcopal church
- Domain
- episcopalchurch.org
Incident
- Discovered
- Feb 17, 2025
- Materiality determined
- —
- Notification sent
- Jul 28, 2025
- Affected individuals
- 20
- Data types
- IDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPII
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- Partner
- Regulator citations
- Notified NH Department of Justice
- Third party
- via Linear Technologies, Inc.
- Initial access
- supply_chain
Compliance
- Time to disclose
- 23 weeks(163 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.