HackingSupply Chain (3P Vendor)Data ExfiltratedIDENTITY_GOVERNMENTPIIHighContained
St. Mark's School of Texas
bd_fdb4ecaa8878724d · schema v1 · pii pii-v1
Full breach record for St. Mark's School of Texas →St. Mark's School of Texas reported a data breach involving its third-party vendor, Blackbaud, Inc. The incident occurred on May 14, 2020, and was discovered on September 27, 2020. The breach compromised names and Social Security Numbers of 5,676 individuals, including one Maine resident. Notification was sent on June 8, 2021, offering 24 months of credit monitoring and fraud assistance.
Maine clockDiscovered Sep 27, 2020 → Filed with AG Jun 17, 2021263d ✗ ME AG >90d38 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_919ba6ace5407df0Montana State AGfiled 2021-06-08(9d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1b8355a3-f31e-44f4-b107-b21ba954ba19.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 17, 2021
- Raw hash
- 90156fdd57448123ee2d02b61d24ca1ce247da05ef04813a733d4922c603e023
Reporting entity
- Name
- St. Mark's School of Texasnorm: st mark s school of texas
Victim entity
- Name
- St. Mark's School of Texasnorm: st mark s school of texas
Incident
- Discovered
- Sep 27, 2020
- Materiality determined
- —
- Notification sent
- Jun 8, 2021
- Affected individuals
- 5,676
- Data types
- IDENTITY_GOVERNMENTPII
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- Partner
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Third party
- via Blackbaud, Inc.
- Initial access
- supply_chain
Compliance
- Time to disclose
- 38 weeks(263 days from discovery to filing)
- Compliance flags
- ME AG >90d · 263dME resident >180d · 254d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 27, 2020→ Filed with AG: Jun 17, 2021263d 90 days ME AG >90d Maine Discovered: Sep 27, 2020→ Notified: Jun 8, 2021254d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.