Blackbaud Settles Data Breach With 49 States, DC for $50 Million

Blackbaud Inc. has agreed to pay nearly $50 million to settle allegations from 50 attorneys general over the software provider’s poor data security and lax response to ransomware attacks that exposed donor information of over 13,000 nonprofit groups and organizations.

The deal will hold Blackbaud to new cybersecurity standards following a 2020 incident involving its software that charities, schools, and other organizations use to manage donor outreach. Hackers held for ransom the donation history, Social Security numbers, and other sensitive personal information, while Blackbaud waited two months before informing clients of the issue.

The coalition of attorneys general said Thursday ...