Georgia Southern University

Georgia Southern University filed a supplemental notification with the New Hampshire Attorney General regarding a third-party vendor incident involving Blackbaud. The filing discloses 81 additional New Hampshire residents whose names and Social Security Numbers were exposed. The University is providing credit monitoring services and has notified the AG. The incident was initially reported on October 9, 2020.

Georgia Southern University experienced an external system breach that was discovered on July 24, 2020. The incident, which occurred between February 7, 2020, and May 20, 2020, affected 95 Maine residents. The compromised data included names and Social Security Numbers. Affected individuals were notified on November 13, 2020, and offered one year of credit monitoring and identity theft protection services through Kroll.

Georgia Southern University notified Washington AG of a third-party vendor (Blackbaud) ransomware incident. Unauthorized access occurred Feb 7-May 20, 2020. 552 Washington residents affected (names, SSNs). Blackbaud paid ransom; data destroyed. Notice sent Oct 9, 2020. Credit monitoring offered.

Georgia Southern University notified NH AG of a ransomware attack on third-party vendor Blackbaud. Unauthorized access occurred Feb 7 - May 20, 2020. Backup files containing names and SSNs of 74 NH residents were exfiltrated. Blackbaud paid ransom and confirmed data destruction. GSU notified residents on Oct 9, 2020, offering 1-year credit monitoring.

Georgia Southern University notified affected individuals of a third-party vendor breach involving Blackbaud. Unauthorized access occurred between Feb 7 and May 20, 2020. Blackbaud, a cloud software provider, suffered a ransomware attack where backup files containing names, SSNs, and donor profiles were exfiltrated. Blackbaud paid a ransom and confirmed data destruction. Georgia Southern removed SSNs from its database and offered one year of Kroll identity monitoring.

Georgia Southern University notified Montana residents of a ransomware attack on vendor Blackbaud. Unauthorized access occurred Feb 7–May 20, 2020. Data included names, SSNs, and donor profiles. Blackbaud paid ransom, destroyed data, and fixed vulnerabilities. GSU provided 1-year Kroll identity monitoring.

Georgia Southern University reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-10-09. 371 Massachusetts residents were affected. The report records the breach type as electronic.

Georgia Southern University experienced a data breach impacting 80 Maine residents. The breach occurred between February 7, 2020, and May 20, 2020, and was discovered on July 24, 2020. The compromised information included names and Social Security numbers. The breach was a result of an external system breach (hacking). The university offered one year of credit monitoring and identity theft protection services through Kroll.

Georgia Southern University reported a data breach to the Indiana Attorney General. The breach occurred on 2020-02-07 and was reported on 2020-10-09. 394 Indiana residents were affected. 172,813 individuals affected in total.

Georgia Southern University notified California residents of a data breach involving its vendor, Blackbaud. Between February 7 and May 20, 2020, an unauthorized party accessed Blackbaud's network, exfiltrated backup files, and attempted ransomware encryption. Blackbaud paid a ransom and confirmed file destruction. Affected data included names, Social Security numbers, and donor profiles. The university is removing SSNs from Blackbaud and offering one year of identity monitoring.

GEORGIA SOUTHERN UNIVERSITY filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-481). The register records the breach as discovered on October 9, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

GEORGIA SOUTHERN UNIVERSITY filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-413). The register records the breach as discovered on February 7, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.