Heifer International

Heifer Project International notified the NH AG of a third-party vendor (Blackbaud) ransomware incident. Data accessed included names and financial account numbers for 2,802 NH residents. Incident occurred May 2020; discovered July 16, 2020. Notices sent Aug 21, 2020.

Heifer International notified individuals of a ransomware incident affecting its third-party vendor, Blackbaud, Inc. The incident occurred in May 2020. Blackbaud, a CRM host for nonprofits, detected the ransomware and locked out the actor. Heifer International investigated and determined that affected records contained names and other personal information. No specific access to Heifer's data was confirmed by Blackbaud. The notice was sent on July 16, 2020.

Heifer Project International reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-08-21. 13,771 Massachusetts residents were affected. The report records the breach type as electronic.

Heifer Project International reported a data breach to the Oregon Attorney General. The breach was reported on 2020-08-21. The breach occurred during 5/14/2020. The breach was discovered on 7/22/2020. 474,532 individuals were affected. Notice was sent on 8/21/2020.

Heifer Project International reported a data breach to the Indiana Attorney General. The breach occurred on 2020-05-14 and was reported on 2020-08-21. 7,127 Indiana residents were affected. 474,532 individuals affected in total.

Heifer Project International notified the Washington AG of a ransomware incident at third-party vendor Blackbaud. The breach affected 120,041 Washington residents, exposing names, driver's licenses, passports, DOBs, and financial account numbers. Heifer discovered the incident on July 16, 2020, and sent notifications on August 21, 2020.

Heifer Project International notified Montana AG of a third-party ransomware incident involving vendor Blackbaud in May 2020. The incident was discovered by Heifer on July 16, 2020. Personal information (names) was potentially involved. Heifer offered one year of credit monitoring. No specific data access was confirmed for Heifer's records.

Heifer International notified Delaware AG of a third-party data event involving vendor Blackbaud. A ransomware attack on Blackbaud's systems in May 2020 resulted in data exfiltration. Heifer's affected data included names and financial account numbers for 1,225 Delaware residents. Heifer notified affected individuals on August 21, 2020, and implemented additional employee safeguards and vendor review processes.

HEIFER PROJECT INTERNATIONAL filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-307). The register records the breach as discovered on July 16, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Heifer International reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-02-21. 3 Massachusetts residents were affected. The report records the breach type as electronic.