Florida Conference of Seventh-day Adventists

On August 26, 2020, the Florida Conference of Seventh-day Adventists (FCSDA) fell victim to a ransomware attack that resulted in a data breach after external hackers compromised its network. The incident was formally reported to the Maine Office of the Attorney General on September 29, 2020, confirming that the breach exposed personal information of 7,154 individuals, including financial account numbers and Social Security numbers of at least three Maine residents. The attack involved unauthorized access to FCSDA’s systems, leading to the encryption of data and potential exfiltration of sensitive records. While the full scope of the breach was not detailed, the exposure of financial and personally identifiable information (PII) posed significant risks, including identity theft, financial fraud, and reputational harm to the affected individuals. The organization likely faced operational disruptions, recovery costs, and regulatory scrutiny due to the incident. The involvement of ransomware further escalated the severity, as it combined data theft with extortion risks, heightening the threat to both the organization and its stakeholders.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f6090434-dc22-4b52-85af-2ae8c457b1ef.shtml

TPRM report: https://www.rankiteo.com/company/florida-conference-of-seventh-day-adventists

"id": "flo957091725",
"linkid": "florida-conference-of-seventh-day-adventists",
"type": "Ransomware",
"date": "8/2020",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'customers_affected': 7154,
                        'industry': 'religious',
                        'location': 'Florida, USA',
                        'name': 'Florida Conference of Seventh-day Adventists '
                                '(FCSDA)',
                        'type': 'non-profit organization'}],
 'attack_vector': 'external hacking',
 'data_breach': {'number_of_records_exposed': 7154,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'high',
                 'type_of_data_compromised': ['personal information',
                                              'financial account numbers',
                                              'social security numbers']},
 'date_detected': '2020-08-26',
 'date_publicly_disclosed': '2020-09-29',
 'description': 'The Florida Conference of Seventh-day Adventists (FCSDA) '
                'experienced a data breach due to a ransomware infection on '
                'August 26, 2020. The breach involved external hacking of '
                "FCSDA's network, potentially compromising the personal "
                'information of 7,154 individuals, including financial account '
                'numbers and social security numbers of three Maine residents. '
                'The incident was reported to the Maine Office of the Attorney '
                'General on September 29, 2020.',
 'impact': {'data_compromised': True,
            'identity_theft_risk': True,
            'payment_information_risk': True},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'title': 'Florida Conference of Seventh-day Adventists Ransomware Data Breach '
          '(2020)',
 'type': ['ransomware', 'data breach']}