Blackbaud Data Breach
Dear Alumni and Friends,
We were recently notified by our data management software vendor, Blackbaud, of a breach of their system between February and May 2020, and we are contacting you to make you aware. Blackbaud is a global company that provides a variety of services to nonprofit organizations, foundations and educational institutions across the U.S. and internationally. Many institutions in the U.S. and in Georgia have been impacted by this breach, including Young Harris College. YHC takes the protection and proper use of your information very seriously and is in detailed conversations with Blackbaud about this serious matter and their handling of information.
According to Blackbaud, credit card information, bank account information or Social Security numbers were not exposed. However, the data that was accessed may include names, addresses, dates of birth, contact information, schools attended, fields of study, dates of graduation, giving history and names of employers for some donors/alumni.
Also according to Blackbaud, their investigation and those of law enforcement concluded the accessed data has not been further exposed by the cybercriminal. Blackbaud has already implemented several changes to protect your data and reduce the risk of future incidents. Blackbaud has summarized the incident on its website at www.blackbaud.com/securityincident. We continue to review the matter with Blackbaud and appropriate authorities to ensure personal information remains secure.
We apologize for this inconvenience. Below are answers to frequently asked questions regarding this data breach. If you have any additional questions, please contact us at email@example.com.
Mark Dotson, ’88
Vice President of Advancement
BLACKBAUD DATA SECURITY INCIDENT FREQUENTLY ASKED QUESTIONS (FAQ)
1. WHAT HAPPENED?
A third-party vendor, Blackbaud, informed Young Harris College (YHC) of a data breach that resulted in unauthorized access to certain information maintained by Blackbaud. Upon learning of this incident, we worked with YHC’s IT team to determine what, if any, data was impacted. Please know that we take this incident and the safeguarding of the security of our donors’ information very seriously. We are diligently working to determine the full nature and scope of this incident, as well as to confirm whether YHC’s data was involved.
2. WHAT INFORMATION OF MINE WAS POTENTIALLY ACCESSED?
YHC is actively investigating what, if any, information was potentially impacted by Blackbaud’s data breach. Blackbaud advised all of its customers that no credit card information was included in the impacted files, and that no bank account information, usernames, passwords or Social Security numbers were accessible to the unauthorized actor. No encrypted data was compromised, and personal financial data is encrypted.
YHC understands from the information provided by Blackbaud that certain constituent records may have been included among the data potentially impacted. Such records could include donor names, physical addresses, phone numbers and birth dates.
3. WHAT IS YHC DOING TO PREVENT THIS FROM HAPPENING AGAIN?
YHC is currently investigating the nature and scope of this incident and will work with Blackbaud to evaluate additional measures and safeguards to protect against this type of incident in the future.
4. WHAT SHOULD I DO?
According to Blackbaud, this incident did not disclose information that would put your identity at risk. While Blackbaud has stated that there is no evidence of further misuse of the information involved in this incident, you may wish to monitor financial transactions and your credit report. If you wish to monitor your credit reports for suspicious or unauthorized activity, under U.S. law, you are entitled to one free credit report annually from each of the three major credit reporting bureaus. To order your free credit report, visit www.annualcreditreport.com or call, toll-free, 1-877-322-8228. You may also contact the three major credit bureaus directly to request a free copy of your credit report:
P.O. Box 9554
Allen, TX 75013
P.O. Box 2000
Chester, PA 19106
P.O. Box 105069
Atlanta, GA 30348
5. WAS LAW ENFORCEMENT NOTIFIED ABOUT THIS DATA BREACH?
Yes. Blackbaud reported that they notified and are cooperating with the Federal Bureau of Investigation.
6. IS CREDIT MONITORING BEING OFFERED?
Credit monitoring is not being offered, as Blackbaud stated the data breach did not expose personal information used to commit identity theft. Furthermore, Blackbaud reported no evidence of misuse of the information involved.