The Marines' Memorial Association & Foundation experienced a ransomware attack on May 20, 2020, via their third-party vendor, Blackbaud, Inc. The breach was publicly disclosed by the California Office of the Attorney General on April 6, 2021. The incident compromised the personal data of at least 20 Rhode Island residents, though the full scope of affected individuals—including potential exposure of members, donors, or employees—remains undisclosed. As a ransomware attack, the incident likely involved encryption of sensitive data, followed by a demand for payment to restore access. While the exact type of leaked information (e.g., financial records, personal identifiers, or internal communications) was not specified, the involvement of a third-party vendor suggests a supply-chain compromise, amplifying risks of broader data exposure. The delayed disclosure (nearly a year post-breach) further raises concerns about transparency and mitigation efforts. The attack’s impact extended beyond immediate data loss, potentially damaging the organization’s reputation, operational trust, and financial stability, particularly given its reliance on donor and member relationships. The unknown scale of the breach also leaves open the possibility of long-term identity theft or fraud risks for affected individuals.

The Marines' Memorial Association & Foundation experienced a ransomware cyberattack between February 7, 2020, and May 20, 2020, reported by the Washington State Office of the Attorney General on April 6, 2021. The breach compromised highly sensitive personal and financial data of 2,625 Washington residents, including names, Social Security numbers, financial records, dates of birth, military IDs, health insurance details, medical data, and biometric information. The attack exposed critical personal, financial, and health-related data, posing severe risks such as identity theft, financial fraud, and potential misuse of military and biometric records. The involvement of ransomware suggests that attackers may have encrypted and exfiltrated data, demanding payment for decryption or to prevent further exposure. The breadth of compromised information—spanning financial, medical, and biometric data—indicates a high-severity incident with long-term repercussions for affected individuals, including potential fraud, blackmail, or operational disruptions for the organization. The breach underscores significant vulnerabilities in data protection, particularly for an entity handling military-affiliated and highly sensitive records.