Blackbaud Security Incident - Follow Up

Good morning all,


I'm sure yesterday several of you received the email from Andrea Soriano detailing the ransomware attack on Blackbaud's data and how it affects our organizations. I know that we are all in different jurisdictions and different states have different laws about this, but I was curious if anyone was required or was planning any sort of communication to their constituents about this breach. Also, if so, would you be willing to share the language you are using in your communication.


Thank you!


 

Comments

  • Considering the complexity and variety of laws covering incidents such as this, we are referring the matter to our lawyers for advice. I'll share what we learn when we learn it.
  • I think Meg's response in another thread is fairly complete, and other customers seemed to have followed the suggest CYA wording.

    For the cost of talking to a lawyer, I hope they replied "no charge" and simply gave you info and requirements for the State of Long Island.

    https://community.blackbaud.com/forums/viewtopic/147/51457

Categories