ST. PAUL'S SCHOOL

St. Paul's School (NH) notified the NH Attorney General of a ransomware incident at third-party vendor Blackbaud. Unauthorized access occurred Feb 7–May 20, 2020. Blackbaud exfiltrated backup files containing donor names, SSNs, and financial account info. 1,814 NH residents were affected. Notifications were mailed Jan 21, 2021, offering 2 years of credit monitoring. Blackbaud paid a ransom and destroyed stolen files.

St. Paul's School reported a data breach impacting 104 Maine residents due to a security incident at their third-party vendor, Blackbaud, Inc. The breach, which occurred between February 7, 2020, and May 20, 2020, was discovered on October 8, 2020. The incident was described as an external system breach (hacking) and resulted in the exposure of names and Social Security Numbers. Affected individuals were notified on January 21, 2021, and offered two years of complimentary credit monitoring and identity theft protection services.

St. Paul's School reported a data breach to the Indiana Attorney General. The breach occurred on 2020-02-07 and was reported on 2021-01-21. 9 Indiana residents were affected. 4,480 individuals affected in total.

St. Paul's School reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-01-21. 814 Massachusetts residents were affected. The report records the breach type as electronic.

St. Paul's School notified Montana residents of a ransomware incident at vendor Blackbaud, Inc. Unauthorized access occurred Feb 7–May 20, 2020. Backup files containing names and SSNs were exfiltrated. Blackbaud paid a ransom and destroyed files. St. Paul's offered credit monitoring.