Universities, Charities Targeted In Blackbaud Ransomware Attack

Software provider Blackbaud was hit with a ransomware attack earlier this year that has affected more than a hundred charities and universities in the U.K., U.S. and Canada.

What is Blackbaud? 

Blackbaud is a U.S.-based company and the world’s largest supplier of software in the field of education, fundraising and financial management. Blackbaud powers technology for community leaders like schools, non-profit organisations, healthcare companies, religious organisations, and more.

How Did the Blackbaud Ransomware Attack Happen?

According to Blackbaud, the attack was discovered in May 2020. 

In the Blackbaud ransomware attack, criminal hackers were trying to intrude on businesses by locking them out of their own servers, preventing them from retrieving their data. Ransomware seizes data and keeps anyone from obtaining it, or encrypts the data so it is inaccessible. The term “ransomware” is not misleading, as the data is held for ransom by cybercriminals.

After the Blackbaud ransomware attack was discovered, the company’s cybersecurity team, law enforcement and forensics experts stopped the cybercriminals. The hackers were unable to block system access and were cast out of Blackbaud’s system, the company says.

However, before the cybercriminal was banished from the system, the hacker was able to remove a copy of data from Blackbaud.

According to the company, the cybercriminal did not obtain credit card information, bank account details or social security numbers. 

The cybercriminal was paid off an unknown amount in the Blackbaud ransomware attack after it was confirmed that the stolen copy of information was destroyed.

Blackbaud paid the hacker to keep consumer data safe, and based on their research and investigation, they do not believe any data was compromised further. Blackbaud believes the stolen information will not be misused or revealed publicly from here on out.

Following the Blackbaud ransomware attack, a class action lawsuit was filed in Canada, accusing the company of not adequately protecting data.

Who Was Affected by the Blackbaud Ransomware Attack?

There have been over 20 universities and charities confirmed to have been affected by the Blackbaud ransomware attack, but the proportions of the cyber breach have not been disclosed by Blackbaud, according to the BBC.

There may be more U.K. Blackbaud victims and dozens of more organisations affected by the data breach.

U.K. Blackbaud victims may anyone with connections to De Montfort University, Loughborough University, Oxford Brookes University, University of Birmingham, University College Oxford, University of Exeter, University of Leeds, University of London, University of Reading, University of Strathclyde, University of York or many other institutions and nonprofits, according to the BBC.

The U.K.’s National Trust has also been added to the list of U.K. Blackbaud victims.

Several other universities, charities and organisations in Canada and the U.S. have had data stolen in the Blackbaud ransomware attack. All of the organisations have reportedly sent letters and emails of apology.

There is an apparently growing number of affected organisations.

According to the BBC, the U.K.’s Information Commissioners Office reported 125 organisations had stated they were a part of the Blackbaud ransomware attack.

What Happens Next?

The victims involved in the Blackbaud ransomware attack, including U.K. Blackbaud victims, have been informed and given resources.

Blackbaud has apologised for the incident and is committed to doing its best to assist victims.

According to Blackbaud, the company has been five years building a significant cybersecurity shield. The company boasts a devoted team of professionals to assist them in times of an attack.

Blackbaud has had independent reviewers assess their security programme and it has been labeled as exceeding satisfactory standards. Blackbaud is managing continuing risk assessments. 

The strength of the company’s security practices allowed it to stop the Blackbaud ransomware attack, the company says. It has structured changes to prevent this kind of attack from happening in the future. 

Those who are still concerned about the Blackbaud ransomware attack can read more about their security policies. 

Was an organisation you are affiliated with a part of the Blackbaud ransomware attack? Let us know in the comments.

Read More Lawsuit & Settlement News:

Government Considers Pub Curfew as Number of COVID-19 Cases Rises

Northumbria University Campus Closed, Exams Cancelled Following Data Breach

British Airways Data Breach Group Action Open Claim

Marriott Data Breach Group Action Open Claim

Read More Lawsuit & Settlement News:

Neocate Infant Formula Linked to Broken Bones, Rickets: Study

Why is Black Lung Disease Still Killing Coal Miners?

What Type of Lung Cancer is Caused by Asbestos?

Regions Bank May Have Charged Illegal Post-Payment Fees on Mortgages