Cathedral High School

St. Francis Catholic High School notified the California AG of a data breach involving a third-party vendor, Blackbaud. A ransomware attack on Blackbaud resulted in the exfiltration of a 2007 backup file containing students' names, dates of birth, and Social Security numbers. Blackbaud paid the ransom and confirmed the data was destroyed. The school is offering 24 months of credit monitoring to affected families.

Cathedral Catholic High School (operating under the Diocese of Charlotte) reported a data breach involving third-party vendor Blackbaud. Legacy backup files containing names, addresses, phone numbers, and Social Security Numbers (or Tax ID numbers) were exposed because they were not destroyed or encrypted after migration. The incident was detected in May 2020, with notifications sent in November 2020. Affected individuals were offered 24 months of credit monitoring and fraud resolution services.

Saint Xavier High School, an educational institution located in Louisville, KY, experienced an external system breach (hacking) between February 7, 2020, and May 20, 2020. The incident was discovered on October 29, 2020. The breach compromised the names and Social Security Numbers of 3,885 individuals, including one Maine resident. The school provided written notification to affected individuals on November 10, 2020, and offered two years of credit monitoring and identity theft protection services through CyberScout.