Supply chain
β Supply Chain
Great Heart Academies Third-Party Breach (November 2020)
Primary Source βIncident Details
Great Hearts Academies students and parents were victims of data breach. An unknown number of students at Great Hearts Academies and their parents had their names and contact information stolen by a hacker in a ransomware attack earlier this year, Arizona Mirror has learned. The attack took place between Feb. 7 and May 20, but Great Hearts Academies β which operates 22 charter schools in Arizona and 11 in Texas β only began notifying those whose data was breached on Nov. 16. β[W]e are writing to let you know about a data security incident with a third-party service provider used by Great Hearts which may have involved your personal information and how the situation has been resolved,β Great Hearts Academies wrote in an email to affected families obtained by the Mirror. Third-party company: Blackbaud.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Blackbaud
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2020-11-01 Breach occurred
- 2020-11-18 Publicly disclosed