Cross Catholic Outreach, Inc.

On September 18, 2024, the Vermont Office of the Attorney General disclosed a data breach affecting Cross Catholic Outreach, Inc. The incident stemmed from suspicious activity detected in mid-April 2024, with unauthorized access to systems confirmed on April 14 and April 17, 2024. While the investigation remains ongoing, the breach involved potential exposure of personal information, though the specific types of compromised data (e.g., financial records, identities, or sensitive details) and the number of affected individuals have not yet been disclosed.The lack of clarity on the scope of the breach whether it impacted employees, donors, beneficiaries, or third parties adds uncertainty to the severity. However, the access to personal information suggests a risk of identity theft, fraud, or reputational harm for those affected. The delayed public notification (nearly five months after detection) may further exacerbate trust issues. As a faith-based nonprofit, the organization could face donor attrition, legal repercussions, or regulatory penalties depending on the final findings.The breach underscores vulnerabilities in data protection protocols, particularly for organizations handling sensitive supporter or beneficiary data. Without confirmation of ransomware, financial theft, or systemic disruption, the primary concern revolves around unauthorized data access and its downstream consequences.

Source: https://ago.vermont.gov/document/2024-09-18-cross-catholic-outreach-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/crosscatholicoutreach

"id": "cro016091825",
"linkid": "crosscatholicoutreach",
"type": "Breach",
"date": "4/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Religious/Charitable',
                        'name': 'Cross Catholic Outreach, Inc.',
                        'type': 'Non-profit Organization'}],
 'data_breach': {'personally_identifiable_information': True},
 'date_detected': '2024-04-01',
 'date_publicly_disclosed': '2024-09-18',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'breach involving Cross Catholic Outreach, Inc. The breach '
                'involved suspicious activity detected in mid-April 2024, with '
                'potential personal information being accessed on April 14 and '
                'April 17, 2024. The specific types of compromised data and '
                'the number of affected individuals are currently unknown.',
 'impact': {'data_compromised': True},
 'investigation_status': 'Ongoing (types of compromised data and number of '
                         'affected individuals unknown)',
 'references': [{'date_accessed': '2024-09-18',
                 'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Vermont Office of the '
                                                        'Attorney General']},
 'title': 'Data Breach at Cross Catholic Outreach, Inc.',
 'type': 'Data Breach'}