Wilmington Friends School

Wilmington Friends School, an educational institution, reported a data breach to the Maine Attorney General's office. The breach, which was discovered on September 29, 2020, and occurred on May 20, 2020, was the result of an external system breach or hacking. The incident affected 4 Maine residents, and a total of 2,697 individuals. The compromised information included names in combination with Social Security numbers. In response to the breach, the school offered 24 months of identity monitoring, fraud consultation, and identity theft restoration services through CyberScout. Consumer notifications were sent on November 30, 2020.

Affected (this filing): 4

Wilmington Friends School (WFS) disclosed a ransomware incident involving its third-party vendor, Blackbaud. An unknown actor accessed Blackbaud systems in May 2020, exfiltrating data before being locked out on May 20, 2020. WFS was notified on September 29, 2020, and determined that Delaware residents' names, Social Security numbers, and tax identification numbers were accessible. WFS notified approximately 1,907 Delaware residents starting November 30, 2020, offering 24 months of credit monitoring.

Affected (this filing): 1,907