According to the FTC, Blackbaud’s poor security breach in February 2020
(2020 article)
led to a hacker accessing the company’s customer databases and stealing personal information of millions of consumers in the United States, Canada, the UK, and the Netherlands.
Blackbaud’s affected customers are mainly non-profits, such as healthcare agencies, charities, and educational organizations.
The FTC’s full report makes shocking reading
(PDF URL) #CoSoSec
https://www.ftc.gov/system/files/ftc_gov/pdf/Blackbaud-Complaint.pdf
Blackbaud "failed to monitor attempts by hackers to breach its networks, segment data to prevent hackers from easily accessing its networks and databases, ensure data that is no longer needed is deleted, adequately implement multifactor authentication, and test, review and assess its security controls" and that it "allowed employees to use default, weak, or identical passwords for their accounts."
