July 16, 2020, the Organization received notice that its third-party service provider, Blackbaud, had been the target of a ransomware attack. The Organization reported:
According to Blackbaud, the attack was discovered on the same day the incident occurred, May 14, 2020. The Cyber Security team, together with independent forensic experts and law enforcement, successfully prevented the bad-actor from blocking Blackbaud’s system access and fully encrypting the files.
According to Blackbaud, ransom was paid in return for the assurance the information would be destroyed and had not been disclosed or misused. The incident affected Blackbaud’s back-ups, not any live operational data. Any donor information resident on the back-ups from the period of February 7, 2020 to May 20, 2020 would be impacted.