MalwareRansomwareSupply Chain (3P Vendor)Data ExfiltratedData EncryptedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Heifer International
bd_ff5af240d1fb968f · schema v1 · pii pii-v1
Full breach record for Heifer International →Heifer International notified Delaware AG of a third-party data event involving vendor Blackbaud. A ransomware attack on Blackbaud's systems in May 2020 resulted in data exfiltration. Heifer's affected data included names and financial account numbers for 1,225 Delaware residents. Heifer notified affected individuals on August 21, 2020, and implemented additional employee safeguards and vendor review processes.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,225 affectedView incident
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2020/09/Heifer-Project-International-Notice-of-Data-Event-DE.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 21, 2020
- Raw hash
- de43be47b15201d5ec9955a233c12693f97677ee150f3125e64fab464a663f80
Reporting entity
- Name
- Heifer Internationalnorm: heifer international
- Domain
- heifer.org
Victim entity
- Name
- Heifer Internationalnorm: heifer international
- Domain
- heifer.org
Incident
- Discovered
- Jul 16, 2020
- Materiality determined
- —
- Notification sent
- Aug 21, 2020
- Affected individuals
- 1,225
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified state regulators, as required
- Initial access
- supply_chain
Compliance
- Time to disclose
- 5 weeks(36 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.