Supply chain β›“ Supply Chain

Great Heart Academies Third-Party Breach (November 2020)

πŸ“… 2020-11-01 🏒 Blackbaud
Primary Source β†—

Incident Details

Great Hearts Academies students and parents were victims of data breach. An unknown number of students at Great Hearts Academies and their parents had their names and contact information stolen by a hacker in a ransomware attack earlier this year, Arizona Mirror has learned. The attack took place between Feb. 7 and May 20, but Great Hearts Academies β€” which operates 22 charter schools in Arizona and 11 in Texas β€” only began notifying those whose data was breached on Nov. 16. β€œ[W]e are writing to let you know about a data security incident with a third-party service provider used by Great Hearts which may have involved your personal information and how the situation has been resolved,” Great Hearts Academies wrote in an email to affected families obtained by the Mirror. Third-party company: Blackbaud.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Blackbaud
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2020-11-01 Breach occurred
  2. 2020-11-18 Publicly disclosed