Vermont Student Assistance Corporation
ent_019e22d57e975ca63f4b1c35276a8531
Disclosures
9
State AG · 6 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
19,754
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Vermont Student Assistance Corporation
- Normalized
- vermont student assistance— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300VHYVRSKNFRSZ91
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (9)newest first
- Massachusetts State AGas victim2021-12-09
Vermont Student Assistance Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-12-09. 6 Massachusetts residents were affected. The report records the breach type as electronic.
- Maine State AGas victim2021-12-09
Vermont Student Assistance Corporation, a non-profit organization, reported an external system breach (hacking) that occurred between May 7, 2021, and June 30, 2021. The breach was discovered on September 30, 2021, and affected 392 Maine residents. The compromised information included names and Social Security numbers. The organization offered 12 months of credit monitoring, identity restoration services, and identity theft insurance through Experian.
- Montana State AGas victim2020-10-04
Vermont Student Assistance Corporation (VSAC) notified Montana authorities of a third-party vendor breach involving Blackbaud. A ransomware incident at Blackbaud in May 2020 led to the encryption of systems and exfiltration of a database backup containing VSAC customer names and SSNs. VSAC notified 48 Montana residents on September 4, 2020, offering credit monitoring.
- California State AGas victim2020-09-25
Vermont Student Assistance Corporation (VSAC) notified customers of a data breach resulting from a ransomware attack on its third-party vendor, Blackbaud, Inc. The unauthorized actor removed a database backup containing VSAC data between February 7, 2020, and May 20, 2020. VSAC learned of the incident on July 16, 2020. Affected data includes names and Social Security numbers. VSAC is offering 12 months of credit monitoring and identity theft restoration services.
- Maine State AGas victim2020-09-25
Vermont Student Assistance Corporation reported a data breach impacting 19,754 individuals due to a third-party system breach. The incident occurred from February 7 to May 20, 2020, and was discovered on July 31, 2020. Exposed information included names and Social Security numbers. Written notifications were sent to affected parties in September 2020.
- New Hampshire State AGas victim2020-09-08
Vermont Student Assistance Corporation (VSAC) notified the NH AG of a data event involving its third-party vendor Blackbaud. Blackbaud experienced a ransomware incident in May 2020, resulting in system encryption and data exfiltration. VSAC determined that names and Social Security numbers of 1,017 NH residents were potentially affected. VSAC offered 12 months of credit monitoring and established a call center.
- Indiana State AGas victim2020-09-04
Vermont Student Assistance Corporation reported a data breach to the Indiana Attorney General. The breach occurred on 2020-02-07 and was reported on 2020-09-04. 47 Indiana residents were affected. 19,754 individuals affected in total.
- Massachusetts State AGas victim2020-09-04
Vermont Student Assistance Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-09-04. 2,146 Massachusetts residents were affected. The report records the breach type as electronic.
- California State AGas victim2020-09-04
Vermont Student Assistance Corporation (VSAC) notified customers of a data breach involving its third-party vendor, Blackbaud. In May 2020, Blackbaud suffered a ransomware incident where systems were encrypted and a database backup containing VSAC data was exfiltrated by an unauthorized actor between February 7 and May 20, 2020. VSAC learned of the incident on July 16, 2020. The compromised data included names and Social Security numbers. VSAC is offering 12 months of credit monitoring and identity theft restoration services.
Supply-chain cascadesreviewed and confirmed
- Vermont Student Assistance Corporation’s filing is one of at least 175 in the BLACKBAUD, INC. supply-chain incident (2020).