Bishop Moore Catholic High School

The Maine Office of the Attorney General disclosed a data breach affecting Bishop Moore Catholic High School on January 29, 2021, stemming from an external system compromise at Blackbaud, Inc. a third-party vendor managing the school’s data. The breach, detected on December 21, 2020, exposed sensitive personal information, specifically Social Security Numbers (SSNs), of 5,981 individuals, including students, staff, or associated parties. The incident highlights vulnerabilities in third-party data handling, as Blackbaud’s systems were exploited, leading to unauthorized access. SSNs are high-value targets for identity theft, financial fraud, and long-term exploitation, posing significant risks to affected individuals. While the school itself may not have been directly targeted, the reliance on external vendors introduced a critical security gap. The breach underscores the cascading consequences of supply-chain attacks, where a single vendor’s compromise can impact multiple organizations and thousands of individuals. No ransomware or immediate financial demands were reported, but the exposure of SSNs constitutes a severe privacy violation with potential long-term repercussions for victims.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/89420c42-5d9e-41c6-af81-b1bb55a91396.shtml

TPRM report: https://www.rankiteo.com/company/bishop-moore-catholic

"id": "bis948091725",
"linkid": "bishop-moore-catholic",
"type": "Breach",
"date": "2/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '5,981 individuals',
                        'industry': 'Education (Private School)',
                        'location': 'Maine, USA',
                        'name': 'Bishop Moore Catholic High School',
                        'type': 'Educational Institution'},
                       {'industry': 'Software (Cloud Computing, Nonprofit '
                                    'Services)',
                        'name': 'Blackbaud, Inc.',
                        'type': 'Third-Party Vendor'}],
 'data_breach': {'number_of_records_exposed': '5,981',
                 'personally_identifiable_information': ['Social Security '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High (Social Security Numbers)',
                 'type_of_data_compromised': 'Personally Identifiable '
                                             'Information (PII)'},
 'date_detected': '2020-12-21',
 'date_publicly_disclosed': '2021-01-29',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Bishop Moore Catholic High School, which was '
                'discovered on December 21, 2020. The breach occurred due to '
                'an external system breach involving Blackbaud, Inc., '
                'potentially affecting 5,981 individuals. Compromised '
                'information included Social Security Numbers.',
 'impact': {'data_compromised': ['Social Security Numbers'],
            'identity_theft_risk': 'High (SSNs compromised)'},
 'post_incident_analysis': {'root_causes': 'External system breach at '
                                           'third-party vendor (Blackbaud, '
                                           'Inc.)'},
 'references': [{'date_accessed': '2021-01-29',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Public disclosure via Maine Office of '
                                        'the Attorney General'},
 'title': 'Data Breach at Bishop Moore Catholic High School via Blackbaud, '
          'Inc.',
 'type': 'Data Breach'}