Oldfields School

Oldfields School experienced a data breach on February 7, 2020, which was discovered on May 14, 2020, due to an external hacking incident involving Blackbaud, Inc. The breach impacted 387 individuals, including six Maine residents. The compromised data included financial account numbers, credit/debit card numbers, and other sensitive financial details. The attack was attributed to an external system breach (hacking), leading to unauthorized access to financial records. While the breach did not result in broader systemic damage or operational disruption, the exposure of financial data poses risks of fraud, identity theft, and reputational harm to the affected individuals and the institution. The incident was reported to the Maine Office of the Attorney General in January 2021, highlighting delays in public disclosure and potential regulatory scrutiny.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0ceb5141-6412-4186-a77e-e827b41d671e.shtml

TPRM report: https://www.rankiteo.com/company/lewman-studio-llc

"id": "lew914082125",
"linkid": "lewman-studio-llc",
"type": "Cyber Attack",
"date": "2/2020",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'customers_affected': '387',
                        'industry': 'Education',
                        'name': 'Oldfields School',
                        'type': 'Educational Institution'},
                       {'industry': 'Technology/Software',
                        'name': 'Blackbaud, Inc.',
                        'type': 'Service Provider (Third-Party)'}],
 'attack_vector': 'External System Breach (Hacking)',
 'data_breach': {'number_of_records_exposed': '387',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Financial account numbers',
                                              'Credit/Debit card numbers']},
 'date_detected': '2020-05-14',
 'date_publicly_disclosed': '2021-01-22',
 'description': 'The Maine Office of the Attorney General reported that '
                'Oldfields School experienced a data breach involving '
                'Blackbaud, Inc. The breach, discovered on May 14, 2020, was '
                'due to an external system breach (hacking) affecting 387 '
                'individuals, including six residents of Maine. Compromised '
                'information included financial account numbers or '
                'credit/debit card numbers.',
 'impact': {'data_compromised': ['Financial account numbers',
                                 'Credit/Debit card numbers'],
            'identity_theft_risk': 'High (financial data exposed)',
            'payment_information_risk': 'High (credit/debit card numbers '
                                        'exposed)'},
 'references': [{'date_accessed': '2021-01-22',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Public disclosure via Maine Office of '
                                        'the Attorney General'},
 'title': 'Oldfields School Data Breach via Blackbaud, Inc.',
 'type': 'Data Breach'}