Direct Relief

On April 28, 2021, the Washington State Office of the Attorney General reported a data breach incident involving Direct Relief and its third-party service provider Blackbaud, which experienced a ransomware cyberattack between February 7, 2020, and May 20, 2020, affecting 926 Washington residents. The information compromised included names, financial and banking information, and full dates of birth.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=10452

TPRM report: https://www.rankiteo.com/company/directrelief

"id": "dir818072825",
"linkid": "directrelief",
"type": "Ransomware",
"date": "2/2020",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 926,
                        'industry': 'Healthcare',
                        'location': 'Washington',
                        'name': 'Direct Relief',
                        'type': 'Non-profit Organization'}],
 'attack_vector': 'Ransomware',
 'data_breach': {'number_of_records_exposed': 926,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'financial and banking '
                                              'information',
                                              'full dates of birth']},
 'date_detected': '2021-04-28',
 'date_publicly_disclosed': '2021-04-28',
 'description': 'The Washington State Office of the Attorney General reported '
                'a data breach incident involving Direct Relief and its '
                'third-party service provider Blackbaud, which experienced a '
                'ransomware cyberattack between February 7, 2020, and May 20, '
                '2020, affecting 926 Washington residents. The information '
                'compromised included names, financial and banking '
                'information, and full dates of birth.',
 'impact': {'data_compromised': ['names',
                                 'financial and banking information',
                                 'full dates of birth']},
 'references': [{'date_accessed': '2021-04-28',
                 'source': 'Washington State Office of the Attorney General'}],
 'title': 'Data Breach Incident Involving Direct Relief and Blackbaud',
 'type': 'Data Breach, Ransomware'}