Vermont State Colleges

Vermont State Colleges (VSC) notified the New Hampshire Attorney General on February 24, 2021, of a data event involving its third-party vendor, Blackbaud, Inc. Blackbaud experienced a ransomware attack in May 2020, resulting in system encryption and data exfiltration before the threat actor was locked out on May 20, 2020. VSC's investigation determined that potentially affected data included names, addresses, Social Security numbers, and financial account information. Five New Hampshire residents were identified as potentially affected. VSC provided 12 months of credit monitoring through Kroll and is implementing additional safeguards.

Vermont State Colleges reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-03-01. 10 Massachusetts residents were affected. The report records the breach type as electronic.