Blackbaud Reaches Multimillion-Dollar Agreement with States Over 2020 Ransomware Breach

In a significant development, software provider Blackbaud has reached a multimillion-dollar agreement with attorneys general from 49 states in the United States. This agreement is in connection with the massive ransomware breach that occurred in 2020, which had a profound impact on 13,000 nonprofit customers. Let’s delve into the details of this case and explore the aftermath of the breach.

Legal Action by Attorneys General

Following the ransomware attack, attorneys general from numerous states took legal action against Blackbaud. Their assertion was that the company concealed crucial information regarding the extent of the breach and the volume of records compromised. This legal action reflects the seriousness of the situation and seeks accountability from the software provider.

Extent of the Breach

The magnitude of the breach cannot be overstated, with over one million files compromised by the threat actors responsible. This vast amount of data falling into the wrong hands presents a significant risk to the affected organizations and their stakeholders. The breach has had far-reaching implications across the nonprofit sector.

Blackbaud’s Response and Controversy

In an attempt to retrieve the stolen data, Blackbaud made the controversial decision to pay its extortionists. The company believed it was necessary to obtain assurances that the stolen data had been deleted. However, this move drew heavy criticism from security experts who argued that capitulating to ransom demands only encourages further cyberattacks. Blackbaud’s response to the breach has been widely debated in cybersecurity circles, shining a light on the complexities of dealing with ransomware incidents.

Settlement with the SEC

Aside from the legal action taken by states, Blackbaud also faced scrutiny from the Securities and Exchange Commission (SEC). In a separate case, the SEC alleged that the company’s staff had misled investors regarding the impact of the ransomware breach. As a result, Blackbaud agreed to pay a settlement of $3 million. This case further underscores the need for transparency and accountability in dealing with cyber incidents.

Terms of the Agreement

In the current agreement with the states, Blackbaud has agreed to fortify its data security measures to prevent future breaches. Additionally, the company has committed to improving customer notification procedures in the event of another breach. To ensure compliance, a third-party assessment will assess their adherence to the terms of the settlement for a period of seven years. It is a step towards rebuilding trust and preventing similar incidents in the future.

Affected Organizations

The range of organizations impacted by this breach is extensive, covering hospitals, charities, religious organizations, and numerous universities both within and outside the United States. Some notable affected organizations include University College Oxford, the University of London, Canada’s Ambrose University, the University of York, the Rhode Island School of Design, Human Rights Watch, and mental health charity YoungMinds. The breadth of organizations affected demonstrates the widespread ramifications of this breach in various sectors.

The multimillion-dollar agreement reached between Blackbaud and 49 states is a significant step towards addressing the fallout from the 2020 ransomware breach. While Blackbaud maintains its innocence and denies any wrongdoing, their commitment to fortifying data security and improving customer notification procedures is crucial. The involvement of third-party assessment further ensures compliance over the seven-year assessment period. The incident serves as a stark reminder for organizations to prioritize data security and take proactive measures to mitigate cyber risks. Only by remaining vigilant and continually investing in robust security systems can we protect sensitive data from the growing threat of cybercrime.

Explore more

Why Do Talent Management Strategies Fail and How to Fix Them?

What happens when the systems meant to reward talent and dedication instead deepen unfairness in the workplace? Across industries, countless organizations invest heavily in talent management strategies, aiming to build a merit-based culture where the best rise to the top. Yet, far too often, these efforts falter, leaving employees disillusioned and companies grappling with inequity and inefficiency. This pervasive issue

Mastering Digital Marketing for NGOs in 2025: A Guide

In a world where over 5 billion people are online daily, NGOs face an unprecedented opportunity to amplify their missions through digital channels, yet the challenge of cutting through the noise has never been greater. Imagine an organization like Dianova International, working across 17 countries on critical issues like health, education, and gender equality, struggling to reach the right audience

How Can Leaders Prepare for the Cognitive Revolution?

Embracing the Intelligence Age: Why Leaders Must Act Now Imagine a world where machines not only perform tasks but also think, learn, and adapt alongside human workers, transforming every industry from manufacturing to healthcare in ways we are only beginning to comprehend. This is not a distant dream but the reality of the cognitive industrial revolution, often referred to as

Why Do Leaders Lack Empathy During Layoffs? New Survey Shows

Introduction In the current business landscape, layoffs have become a stark reality, cutting across industries from technology to retail, with countless employees facing the uncertainty of job loss. A staggering 53% of workers globally express fear of being laid off within the next year, reflecting a pervasive anxiety that shapes workplace dynamics and underscores a critical challenge for leaders. How

Trend Analysis: AI Content Scraping Ethics

In a striking clash that has reverberated through the digital media landscape, People Inc. CEO Neil Vogel recently accused tech giant Google of acting as a “bad actor” by scraping publisher content for AI training without fair compensation, highlighting a growing tension as artificial intelligence tools reshape how content is consumed and monetized. This conflict, spotlighted during a major industry