The Pennsylvania Office of the Attorney General reported a data breach involving Blackbaud, a third-party service provider for Berwick Academy, on July 16, 2020. The breach involved an attempted ransomware attack on May 20, 2020, and the threat actor removed personal information, including full names and Social Security numbers, from Blackbaud's systems between February 7, 2020, and May 20, 2020. Approximately 1,000 individuals were affected by this incident.
TPRM report: https://www.rankiteo.com/company/berwick-area-school-district
"id": "ber1053072725",
"linkid": "berwick-area-school-district",
"type": "Ransomware",
"date": "2/2020",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': 1000,
'industry': 'Education',
'location': 'Pennsylvania',
'name': 'Berwick Academy',
'type': 'Educational Institution'}],
'attack_vector': 'Ransomware',
'data_breach': {'data_exfiltration': True,
'number_of_records_exposed': 1000,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Full names',
'Social Security numbers']},
'date_detected': '2020-05-20',
'date_publicly_disclosed': '2020-07-16',
'description': 'The Pennsylvania Office of the Attorney General reported a '
'data breach involving Blackbaud, a third-party service '
'provider for Berwick Academy, on July 16, 2020. The breach '
'involved an attempted ransomware attack on May 20, 2020, and '
'the threat actor removed personal information, including full '
"names and Social Security numbers, from Blackbaud's systems "
'between February 7, 2020, and May 20, 2020. Approximately '
'1,000 individuals were affected by this incident.',
'impact': {'data_compromised': ['Full names', 'Social Security numbers']},
'motivation': 'Financial',
'ransomware': {'data_exfiltration': True},
'references': [{'date_accessed': '2020-07-16',
'source': 'Pennsylvania Office of the Attorney General'}],
'title': 'Blackbaud Data Breach',
'type': 'Data Breach'}