Blackbaud has to cough up a few million dollars more over 2020 ransomware attack

Blackbaud suffered a 2020 ransomware incident that resulted in prolonged attacker access and the theft of large volumes of personally identifiable information (including SSNs and financial/medical data) from thousands of customers; regulators later fined and settled with the company citing inadequate security controls, delayed disclosure, and poor monitoring and password practices.