FTC, Blackbaud Finalize Settlement Flowing From 2020 Data Breach

The Federal Trade Commission finalized an order requiring software company Blackbaud Inc. to delete immaterial data and revamp its cybersecurity practices to settle the agency’s complaint stemming from a 2020 breach.

Blackbaud, which provides donor management software to nonprofits, suffered a ransomware attack the exposed the data of millions of consumers in February 2020. The company waited two months to notify customers and then omitted details of what data was exposed, according to the FTC’s complaint.

The agency alleged in February of this year that the company deceived consumers and that its weak security practices, such as using default passwords, ...