Shady Hill School

Shady Hill School reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-09-18. 709 Massachusetts residents were affected. The report records the breach type as electronic.

Shady Hill School reported a third-party breach involving vendor Blackbaud, which suffered a ransomware attack. Access to personal information occurred between Feb and May 2020. Shady Hill was notified on July 16, 2020, and notified 823 individuals (3 in NH) starting Sept 15, 2020. Exposed data included names, addresses, DOB, SSNs, and giving history. Credit monitoring was offered.

Shady Hill School, an educational institution, reported a data breach affecting 5 Maine residents. The breach, which occurred between February 20, 2020, and May 20, 2020, was discovered on July 16, 2020. The incident was categorized as an external system breach (hacking), resulting in the acquisition of names or other personal identifiers in combination with financial account numbers or credit/debit card numbers, including security codes, access codes, passwords, or PINs. Affected individuals were notified in writing on September 17, 2020, and offered 12 months of credit monitoring and fraud loss reimbursement services.