P2021-ND-109

On July 16, 2020, the Organization received notice from its third-party service provider, Blackbaud, that it was the victim of a ransomware attack. Blackbaud informed the Organization that it discovered the attack on the same day it occurred on May 14, 2020, and that it prevented the bad actor from blocking system access and fully encrypting files. According to Blackbaud, a ransom was paid in return for the assurance the information would be destroyed and had not been disclosed or misused. The incident affected Blackbaud’s back-ups, and not any live operational data. Any donor information resident on the back-ups from the period of February 7, 2020 to May 20, 2020 was impacted. Blackbaud informed the Organization that there has been no indication of any impacted data being traded on the dark web.