Blackbaud
Disclosed Jul 16, 20206 years agoSettled
Ransomware attack on donor software firm exposes nonprofit donor data
Blackbaud told customers in July 2020 that it had discovered and stopped a ransomware attack in May in which data was copied; it later said some unencrypted bank account and Social Security number fields may have been accessed. The SEC charged it with misleading disclosures.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Jul 16, 2020 |
| Discovered | May 2020 |
| Attack | Ransomware |
| Data exposed | Names, Addresses, Financial, Social Security numbers, Credentials and tokens |
| Sector | Tech · US |
| Status | Settled |
| Lawsuit or fine | $3M SEC settlement (2023) (about $3M) |
Sources
| Source | |
|---|---|
| Blackbaud 8-K (September 29, 2020)sec.gov · SEC filing | SEC filing |
| SEC Charges Software Company Blackbaud Inc. for Misleading Disclosures About Ransomware Attacksec.gov · Regulator | Regulator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jul 16, 2020 |
Other breaches at Blackbaud
| Breach | Affected | ||||
|---|---|---|---|---|---|
| 2020 ransomware breach of donor data; FTC order, USD 3M SEC and USD 49.5M statesOct 7, 20205 years agoRansomware | Oct 7, 20205 years ago | Ransomware | Tech | Settled | Unknown |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.