P2020-ND-182

The Organization reported it uses an external database called Blackbaud Raiser’s Edge NXT to store information related to its donors and volunteers. On July 16, 2020, Blackbaud informed the Organization that, in
May 2020, it discovered and stopped a ransomware attack. The back up copy of the Organization?s Raiser’s Edge NXT and NetCommunity files were involved in the attack. Blackbaud advised it had successfully prevented the cybercriminal from blocking its system and fully encrypting the files; however, the attackers were able to remove a copy of a subset of data from the Blackbaud environment. Blackbaud reported it paid the ransom demand with confirmation that the data that was removed had been destroyed. The Organization reported the breach occurred between February 7, 2020 and May 20, 2020.