Shorecrest Preparatory School

On January 26, 2021, Shorecrest Preparatory School suffered a **ransomware-driven data breach** after a third-party vendor, **Blackbaud**, was compromised by an unauthorized actor. The incident exposed sensitive data, including **Social Security Numbers**, of **~2,050 individuals**, including **three Maine residents**. The breach stemmed from Blackbaud’s system infiltration, highlighting vulnerabilities in third-party risk management. While the full scope of misuse remains unclear, the exposure of **personally identifiable information (PII)**—particularly SSNs—poses significant risks of identity theft, financial fraud, and long-term reputational damage for the school. The attack underscores the cascading impact of supply-chain cyber incidents, where a vendor’s security lapse directly threatens an institution’s data integrity and stakeholder trust.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5860daf0-f236-444e-8138-86bdc31c950a.shtml

TPRM report: https://www.rankiteo.com/company/blackbaud

"id": "bla007091825",
"linkid": "blackbaud",
"type": "Ransomware",
"date": "5/2020",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 2050,
                        'industry': 'education',
                        'location': 'Florida, USA',
                        'name': 'Shorecrest Preparatory School',
                        'type': 'educational institution'},
                       {'industry': 'software/technology',
                        'name': 'Blackbaud',
                        'type': 'third-party vendor'}],
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 2050,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'high',
                 'type_of_data_compromised': ['Social Security Numbers',
                                              'other personal data']},
 'date_publicly_disclosed': '2021-01-26',
 'description': 'On January 26, 2021, the Maine Office of the Attorney General '
                'reported that Shorecrest Preparatory School experienced a '
                'data breach due to a ransomware incident affecting three (3) '
                'Maine residents. The breach occurred when Blackbaud, a '
                'third-party vendor, had its systems accessed by an '
                'unauthorized actor, potentially compromising Social Security '
                'Numbers among other data for approximately 2050 individuals.',
 'impact': {'data_compromised': True, 'identity_theft_risk': True},
 'ransomware': {'data_exfiltration': True},
 'references': [{'date_accessed': '2021-01-26',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'title': 'Shorecrest Preparatory School Data Breach via Blackbaud Ransomware '
          'Incident',
 'type': ['data breach', 'ransomware']}