Blackbaud Fined $6.75M After 2020 Ransomware Attack

Blackbaud experienced a May 2020 ransomware attack that resulted in the exfiltration of unencrypted sensitive data from roughly 13,000 nonprofit, university, and healthcare customers (including SSNs, bank account information, and login credentials). The company paid a ransom, was later accused of misleading statements about the breach, and has faced regulatory enforcement and multimillion-dollar settlements requiring improved security practices and data minimization.