Stetson

Stetson University, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-11-03. 845 Massachusetts residents were affected. The report records the breach type as electronic.

Stetson University notified affected individuals of a ransomware attack on its third-party vendor, Blackbaud. The cybercriminal exfiltrated data from Blackbaud's systems between February 7, 2020, and May 20, 2020. Stetson discovered the incident on July 16, 2020. The compromised data may have included Social Security numbers and other personal information. Approximately 115 Rhode Island residents were impacted. Stetson engaged external cybersecurity professionals and offered one year of complimentary credit monitoring.

Stetson University notified the New Hampshire Attorney General of a third-party data breach involving Blackbaud. The incident involved an attempted ransomware attack and data exfiltration between Feb 7 and May 20, 2020. 198 NH residents' names and SSNs were potentially compromised. Stetson is offering 12 months of credit monitoring.