Cloud provider stopped ransomware attack but had to pay ransom demand anyway - BlackBaud

Archdiocese of Oklahoma City, Catholic Charities of Oklahoma City, Oklahoma Catholic Radio, the Catholic Foundation of Oklahoma and Bishop McGuinness Catholic High School. In noting the nature of the incident, he said the breach also affected organizations like the Vatican Observatory. https://oklahoman.com/article/5668806/catholic-archdiocese-shares-information-about-data-security-breachbrblackbaud-inc-said-the-incident-was-a-ransomware-attack

Mines Advisory Group, The Christie https://portswigger.net/daily-swig/blackbaud-ransomware-attack-exposed-donor-data-from-two-uk-charities

Enloe Medical Center https://krcrtv.com/news/local/security-breach-at-enloe-medical-results-in-patient-information-theft

swidup commented 3 years ago

Rhode Island School of Design https://www.golocalprov.com/news/risd-announces-data-has-been-hacked-data-breach-and-attempted-ransomeware-a

Rhode Island College Foundation and the Providence Children’s Museum https://www.providencejournal.com/news/20200728/ransomware-attack-hits-ric-foundation-providence-childrenrsquos-museum

Kent State https://www.record-courier.com/news/20200804/kent-state-wksu-among-those-affected-by-ransomware-attack

Leeds Piano Competition https://www.yorkshireeveningpost.co.uk/business/consumer/leeds-piano-competition-confirm-blackbaud-ransomware-breach-2933087

https://www.businesspost.ie/business/irish-charities-hit-in-global-ransomware-hack-attack-0f4bcd15

NUI Galway’s fundraising foundation and VSO Ireland

University of Nevada, Reno https://www.nevadaappeal.com/news/data-about-unr-alumni-donors-may-have-been-stolen-in-may/

Craig Newmark Graduate School of Journalism CUNY Foundation https://www.journalism.cuny.edu/2020/09/notification-of-recent-blackbaud-data-breach/

Young Harris College https://www.yhc.edu/databreach

swidup commented 3 years ago

Ambrose University https://ambrose.edu/ambrose-response-blackbaud-data-breach

Diocese of Portland https://www.sunjournal.com/2020/08/01/diocese-of-portland-information-stolen-in-cyberattack/

Missouri Historical Society https://www.stltoday.com/news/local/crime-and-courts/missouri-historical-society-donor-data-compromised-as-part-of-cyber-breach/article_d52f990e-8104-5b35-ad25-5bd183caa767.html

Diocese of Wheeling-Charleston http://thecatholicspiritwv.org/diocese-notified-of-ransomware-cyber-attack-on-one-of-its-service-providers/

Otis Library https://www.theday.com/local-news/20200929/otis-library-donors-information-part-of-large-cyberattack-at-fundraising-company

Nuvance Health https://www.poughkeepsiejournal.com/story/news/local/2020/09/11/nuvance-health-announces-third-party-data-breach/3470232001/

St Leonards School https://www.stleonards-fife.org/news-information/blackbaud-data-security-breach-notification-from-st-leonards

Diocese of Gaylord https://www.mlive.com/news/2020/08/parishioners-personal-information-was-accessed-in-database-breach-in-northern-michigan.html

swidup commented 3 years ago

Norwich University https://alumni.norwich.edu/emailviewonwebpage.aspx?erid=17666446&trid=e18d3d24-b145-4989-9ef7-9b1af48018af

California State University, Northridge https://scvnews.com/csun-others-possibly-affected-by-massive-hack-of-tech-provider-blackbaud/

MUSC https://www.counton2.com/news/local-news/charleston-county-news/musc-impacted-by-blackbaud-data-breach/

California Western School of Law https://oag.ca.gov/system/files/Sample%20Notice%20of%20Data%20Breach%20-%20Blackbaud%20July%202020%20CWSL.pdf

Porchlight https://www.kentonline.co.uk/canterbury/news/homeless-charity-hit-by-data-breach-231819/

Erie County Library https://www.wgrz.com/article/news/local/data-breach-at-erie-county-library-causes-some-personal-information-to-be-shared/71-dbd9f5f0-edfe-4478-9525-636690038287

QEII Hospital https://www.thechronicleherald.ca/news/local/information-on-qeii-foundation-donors-may-have-been-accessed-by-hacker-483613/

CWU Foundation https://cwuobserver.com/15632/news/cwu-foundation-data-breached-in-security-incident/

swidup commented 3 years ago

https://vtdigger.org/2020/07/23/breach-at-huge-donor-database-firm-hits-home-for-vermont-nonprofits/

Life Enriching Communities operates Twin Towers in College Hill, a suburb of Cincinnati, Twin Lakes in Montgomery and Concord Reserve in Westlake, a city just west of Cleveland. https://www.cincinnati.com/story/news/local/hamiltoncounty/2020/09/16/hackers-cincinnati-twin-towers-residents-data-stolen/5804286002/

In Vermont, nonprofits that were affected include the Vermont Foodbank, Middlebury College and Vermont Public Radio. Also listed was Vermont Public Radio in Colchester.

UW-Eau Claire Foundation https://wqow.com/2020/08/06/uwec-foundation-members-possibly-impacted-by-data-breach/

Northern Light Health Foundation https://www.wabi.tv/2020/08/06/northern-light-health-foundation-responding-to-blackbaud-data-breach/

Case count for above https://www.modernhealthcare.com/cybersecurity/fundraising-database-breach-affects-657000-maine-health-system

AIDS Foundation Chicago https://www.poz.com/article/aids-foundation-chicago-reports-data-breach

Connecticut Audubon Society https://www.stamfordadvocate.com/local/article/CT-Audubon-Society-alerts-donors-to-data-security-15543192.php

swidup commented 3 years ago

Exeter University https://www.radioexe.co.uk/news-and-features/local-news/exeter-university-hit-by-data-breach/

Ronald McDonald House https://rmhccni.org/news/blackbaud-breach/

Wayne State Foundation https://www.newschannelnebraska.com/story/43204233/wayne-state-foundation-data-breach-affects-more-than-donors

Berkshire Farm Center & Services for Youth, Inc. https://www.prnewswire.com/news-releases/berkshire-farm-center--services-for-youth-inc-provides-notice-of-a-data-breach-301136083.html

Como Zoo https://www.kare11.com/article/news/local/como-zoo-donors-informed-of-data-breach/89-de9f58f6-a1e7-4cfa-8e96-7f7c27c9e2b8

Maynooth University https://www.leinsterleader.ie/news/business/565593/maynooth-university-graduates-personal-data-may-have-been-stolen-in-cybercriminal-ransomware-hack.html

John Ball Zoo https://www.mlive.com/news/grand-rapids/2020/08/data-breach-impacts-john-ball-zoo-donors.html

Buffalo Museum of Science https://www.wgrz.com/article/news/local/buffalo-science-museum-vendor-hit-by-data-breach/71-905195fd-b834-4406-9f00-361b3345217e

Northwestern Memorial HealthCare https://www.modernhealthcare.com/technology/northwestern-memorial-data-hacked-56000-individuals-exposed

NorthShore University https://foundation.northshore.org/notice-of-third-party-data-breach

University of Bridgeport https://www.bridgeport.edu/notifications/security/2020-09-08/blackbaud-data-breach-notification

swidup commented 3 years ago

https://www.bbc.com/news/technology-53516413#

The institutions the BBC has confirmed have been affected are: University of York Oxford Brookes University Loughborough University University of Leeds University of London University of Reading University College, Oxford Ambrose University in Alberta, Canada Human Rights Watch Young Minds Rhode Island School of Design in the US University of Exeter

https://www.databreachtoday.com/blackbaud-ransomware-victim-count-climbing-a-14972

Blackbaud Ransomware Attack Breaches on Tally So Far

Breached EntityIndividuals - Affected Northern Light Health - 657,000 Saint Luke's Foundation - 360,000 MultiCare Health System - 179,000 University of Florida Health - 136,000 The Guthrie Clinic - 92,000 Main Line Health - 61,000 Aveanna Healthcare - 166,000 Northwestern Memorial HealthCare - 56,000 Spectrum Health - 53,000 Atrium Health - N/A NorthShore University HealthSystem - N/A Total:1,594,000 Sources: U.S. Dept. of Health and Human Services, breached healthcare entities

swidup commented 3 years ago

Human Rights Watch https://www.hrw.org/news/2020/07/22/breach-hrw-database-hosted-blackbaud#

Paraquad https://www.paraquad.org/notice/

Presbyterian Healthcare Services https://www.easternnewmexiconews.com/story/2020/10/04/news/data-security-breach-announced/166761.html

Manchester Foundation Trust Charity https://rmchcharity.org.uk/blackbaud-statement

University of Cumbria https://www.newsandstar.co.uk/news/18621179.data-breach-university-cumbria/

UT Southwestern Medical Center https://www.dallasnews.com/news/2020/10/02/utsw-patient-data-among-information-hacked-in-third-party-ransomware-attack/

Public Broadcasting Atlanta https://www.wabe.org/press-releases/blackbaud-data-breach/

YWCA of Nashville & Middle Tennessee https://www.newschannel5.com/news/ywca-of-nashville-middle-tennessee-affected-by-data-security-breach

David Shepherd Wildlife Foundation https://davidshepherd.org/news/notice-of-data-breach/

swidup commented 3 years ago

West Virginia University Foundation https://www.wvuf.org/news-publications/news/2020/07/23/blackbaud-data-security-incident

Bishop Museum https://www.bradenton.com/news/local/article244926187.html

St. Joseph School https://www.khq.com/news/state/st-joseph-school-notifies-donors-of-data-security-event/article_2190db97-4d4c-5cd8-aeb8-c15a92856318.html

Emporia State University https://salinapost.com/posts/354d249b-c0d3-483f-9d3f-d64745187039

Mercy Housing https://www.mercyhousing.org/2020/08/unsuccessful-blackbaud-data-breach/

Prevent Cancer Foundation https://www.preventcancer.org/2020/08/notice-of-blackbaud-data-breach/

Multicare Foundation https://auburnexaminer.com/multicare-foundation-addresses-security-incident-on-blackbaud-fundraising-platform/

Seminary of the Southwest https://ssw.edu/news/blackbaud-security-breach/

Atrium Health https://www.wbtv.com/2020/09/05/atrium-alerts-patients-ransomware-data-breach-one-hospitals-vendors/

swidup commented 3 years ago

Western University https://westerngazette.ca/news/students-alumni-data-breached-in-third-party-ransomware-attack/article_2529fe3c-cdfd-11ea-b8b3-279bfae097d1.html

Reconstructing Judaism https://www.reconstructingjudaism.org/news/data-breach-notification

Northeastern Vermont Regional Hospital https://nvrh.org/wp-content/uploads/2020/07/7-27-20-Notice-of-Data-Breach-for-Website-1.pdf

Dayton Children’s Hospital https://www.childrensdayton.org/the-hub/hospital-donors-impacted-data-breach

Vidant Health https://www.witn.com/2020/09/14/vidant-medical-center-announces-security-breach-involving-patient-information/

Blackbaud’s client list includes local groups like Zoo Tampa, the Florida Aquarium, the Tampa Metropolitan Area YMCA and the Boys and Girls Clubs of Tampa Bay.
https://www.abcactionnews.com/news/local-news/i-team-investigates/tampa-bay-donors-personal-information-may-have-been-compromised-in-ransomware-attack

Food Bank of Central & Eastern NC https://www.newsobserver.com/news/business/article245140810.html

swidup commented 3 years ago

Brunel University London https://www.brunel.ac.uk/news-and-events/news/articles/Blackbaud-response

NPR, New Hampshire Public Radio, KPBS and San Diego State University https://current.org/2020/08/npr-stations-respond-to-blackbaud-ransomware-attack/?wallit_nosession=1

Allegheny Health Network https://triblive.com/local/ahn-donors-may-have-been-exposed-to-data-breach-officials-say/

Memorial Sloan Kettering https://abc7ny.com/business/data-breach-of-memorial-sloan-kettering-fundraising-software/6423594/

UMass Memorial https://www.telegram.com/news/20200914/umass-memorial-notifies-patients-of-data-breach

Bletchley Park https://www.miltonkeynes.co.uk/news/crime/bletchley-parks-software-suppliers-computer-system-hacked-data-breach-ransomware-attack-2940092

Harvard Alumni Affairs and Development https://www.thecrimson.com/article/2020/8/13/blackbaud-data-breach/

Slippery Rock University https://www.sharonherald.com/pennsylvania/news/sru-reports-vendor-security-breach/article_95afafc6-c6e6-5744-bfc2-f3d98781bfc9.html

Our Lady of the Lake Regional Medical Center https://www.theadvocate.com/baton_rouge/news/business/article_6542973e-e3f3-11ea-b577-571f3d887e49.html

swidup commented 3 years ago

https://au.news.yahoo.com/blackbaud-hack-more-uk-universities-122722905.html

The institutions the BBC has confirmed have been affected are: De Montfort University University of Strathclyde University of Exeter University of York Oxford Brookes University Loughborough University University of Leeds University of London University of Reading University College, Oxford Middlebury College, Vermont West Virginia University New College of Florida Cheverus High School: Catholic High School Portland The Bishop Strachan School, Canada University of North Florida Ambrose University, Alberta, Canada Rhode Island School of Design, US Other organisations, including charities, confirmed as affected are: Choir with No Name Vermont Foodbank Vermont Public Radio Northwest Immigrant Rights Project Human Rights Watch Young Minds

swidup commented 3 years ago

https://www.hughes.cam.ac.uk/blackbaud-data-breach/ University of Cambridge Hughes Hall

Bishop McGuinness Catholic High School https://kfor.com/news/local/bishop-mcguinness-catholic-high-school-affected-by-third-party-data-breach/

STEM Advisory Council https://www.businessrecord.com/Content/Default/All-Latest-News/Article/STEM-council-one-of-three-Iowa-entities-notified-by-Blackbaud-of-ransomware-attack/-3/248/91001

Oberlin College https://chroniclet.com/news/235498/oberlin-college-warns-donors-of-massive-data-breach/

Roswell Park Alliance, Catholic Health https://www.govtech.com/security/Buffalo-NY-Area-Hospitals-Disclose-Recent-Data-Breach.html

Montefiore Medical Center https://www.prnewswire.com/news-releases/montefiore-notifies-individuals-affected-by-blackbaud-cyberattack-301130472.html

Great Hearts Academies https://www.azmirror.com/blog/great-hearts-academies-students-and-parents-were-victims-of-data-breach/

swidup commented 3 years ago

Des Moines University https://www.dmu.edu/news/2020/07/des-moines-university-response-to-blackbaud-data-breach/

OSF HealthCare Systems https://www.centralillinoisproud.com/news/local-news/osf-addresses-data-breach-of-one-of-its-vendors/

SCL Health https://mtstandard.com/news/state-and-regional/medical-group-announces-data-breach-of-patient-information-at-montana-hospitals/article_681f7d82-5e19-576f-9eb4-8585099cac5b.html

Hope House Children’s Hospice https://www.shropshirestar.com/news/crime/2020/08/05/hope-house-childrens-hospice-attacked-by-cyber-criminals/

Buffalo and Erie County Public Library https://www.govtech.com/security/Brief-Hackers-May-Have-Breached-Library-Donor-Data-in-New-York.html

Idaho State Alumni https://www.kpvi.com/news/local_news/cyber-hackers-target-isu-alumni-information-for-ransom/article_7c126502-f6f9-11ea-b606-e768cba9217a.html

swidup commented 3 years ago

Ventura College Foundation https://venturacollegefoundation.org/blackbaud/

Houston Food Bank https://www.houstonfoodbank.org/news-re-notification-of-service-provider-data-breach/

Chesapeake Regional Healthcare https://www.13newsnow.com/article/news/local/data-breach-impacts-chesapeake-regional-healthcare/291-60ddb8cc-d073-4650-8d48-afe72178acd9

Reading University https://www.readingchronicle.co.uk/news/18607481.reading-university-makes-statement-cyber-attack-data/

Stony Brook University Hospital and Mount Sinai South Nassau Hospital https://www.newsday.com/long-island/suffolk/stony-brook-university-hospital-1.49516418

The Eye and Ear Foundation of Pittsburg https://eyeandear.org/blackbaud-inc-data-breach/

Skyland Trail https://www.skylandtrail.org/news/blackbaud-data-security-breach/

Joslin Diabetes Center https://finance.yahoo.com/news/joslin-diabetes-center-notice-data-235500934.html

swidup commented 3 years ago

Crisis https://en.brinkwire.com/news/homeless-charity-crisis-suffers-data-breach-through-software-provider-blackbaud/

Stamford Hospital https://www.stamfordadvocate.com/local/article/Stamford-Hospital-Patient-info-may-have-been-15698310.php

Children's Minnesota, Allina Health https://www.startribune.com/minnesota-s-second-largest-health-care-data-breach-hits-children-s-allina/572430632/

University of Detroit Mercy https://oag.ca.gov/ecrime/databreach/reports/sb24-193131

Lawrence + Memorial Hospital https://www.theday.com/local-news/20201014/lm-hospital-donor-information-hacked-in-ransomware-attack

Devereux Advanced Behavioral Health https://www.prnewswire.com/news-releases/devereux-foundation-notice-of-blackbaud-data-event-301130665.html

Emanate Health Foundation https://oag.ca.gov/system/files/EHF%20Privacy%20Breach%20Notice_9.2020.pdf

Jewish Federation of St. Louis https://www.stljewishlight.com/news/local/jewish-federation-data-breached-in-cyber-attack/article_d8866ea0-d81d-11ea-b811-13a4c060de36.html

swidup commented 3 years ago

Sheffield Hallam University https://www.thestar.co.uk/education/sheffield-hallam-university-confirms-data-breach-global-ransomware-attack-2924944

Yale-New Haven Hospital https://www.fox61.com/article/news/local/blackbaud-data-breach-impacts-yale-new-haven-hospital/520-773afc19-f6ef-4ed6-be95-ce818cccfa6b

Beebe Healthcare https://www.sussexcountian.com/story/news/local/2021/01/05/blackbaud-hack-exposed-beebe-patient-donor-info/4112064001/

Riverside Health System http://realradio804.com/blackbaud-fundraising-database-ransomware-breach-included-riverside-foundation-donors/

Froedtert Hospital https://www.tmj4.com/news/local-news/froedtert-hospital-says-patient-information-was-stolen-in-data-breach

University of Dallas https://udallas.edu/news/2020/notice-of-blackbaud-data-breach.php

swidup commented 3 years ago

Cancer Research Institute https://www.cancerresearch.org/news/2020/cri-statement-on-blackbaud-data-breach

Smithsonian https://www.theartnewspaper.com/news/smithsonian-confirms-that-its-donor-data-was-potentially-breached-in-ransomware-attack

Rady Children's Hospital https://www.nbcsandiego.com/news/local/rady-childrens-hospital-notifying-patients-of-data-breach-involving-personal-information/2433819/

Manlius Pebble Hill school https://www.syracuse.com/schools/2020/12/manlius-pebble-hill-school-victim-of-nationwide-ransomware-attack.html

swidup commented 3 years ago

Aberdeen University and Robert Gordon University https://www.eveningexpress.co.uk/fp/news/local/rgu-and-aberdeen-university-alumni-data-hit-by-breach/

UT Health San Antonio https://news4sanantonio.com/news/local/ut-health-says-may-cyberattack-saw-patient-names-addresses-and-phone-numbers-stolen

Geisinger https://www.citizensvoice.com/news/geisinger-reports-data-security-breach/article_f6ee4c68-73bf-5a12-92c7-9abd19ed3e59.html

St. Francis Xavier Catholic Schools https://www.postcrescent.com/story/news/2020/09/25/xavier-catholics-schools-victim-blackbaud-data-breach/3537305001/

swidup commented 3 years ago

St Aloysuis' College and University of Strathclyde https://www.glasgowlive.co.uk/news/st-aloysuis-university-strathclyde-hack-18675681

Sisters of Charity Health System https://securityboulevard.com/2020/10/sisters-of-charity-health-system-informs-patients-of-data-breach/

Virginia Museum of Fine Arts https://www.nbc12.com/2020/09/22/vmfa-notifies-patrons-data-breach/

Flagler College https://www.news4jax.com/news/local/2020/09/23/flagler-college-says-alumni-donor-database-was-target-of-ransomware-attack/

swidup commented 3 years ago

University of Manitoba https://news.umanitoba.ca/third-party-service-provider-experiences-data-breach/

Greenwich Hospital https://www.greenwichtime.com/local/article/Greenwich-Hospital-Some-patient-data-exposed-in-15636237.php

Northwood University https://www.northwood.edu/news/northwood-universitys-response-to-blackbaud-data-breach

AdventHealth https://www.wtsp.com/article/tech/data-breach-of-software-company-used-by-adventhhealth-may-have-obtained-donor-information/67-568498a3-5a58-4c04-aedd-56f038525a13

swidup commented 3 years ago

University of Auckland https://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=12352091

Spectrum Health Lakeland https://www.moodyonthemarket.com/spectrum-health-lakeland-alerts-patients-to-data-breach/

Museum of Natural History https://abc7ny.com/museum-of-natural-history-american-data-breach-hackers/7090773/

swidup commented 3 years ago

Texas Tech Foundation https://www.kcbd.com/2020/07/28/texas-tech-foundation-information-part-international-data-security-breach/

swidup commented 3 years ago

The Wallich and Crisis, the terminal illness charity Sue Ryder, and the mental health group Young Minds. UK National Trust. https://www.bbc.com/news/technology-53567699

Northern Light Health https://www.databreaches.net/northern-light-health-reports-data-breach-linked-to-blackbaud-incident/ That attack impacted other Maine organizations as well, include Life Flight of Maine, the Opportunity Alliance and Maine Cancer Foundation. https://wgme.com/news/local/northern-light-health-reports-data-breach

swidup commented 3 years ago

Newcastle University https://www.chroniclelive.co.uk/news/north-east-news/newcastle-university-hit-data-breach-18676400

convoy of hope https://www.prnewswire.com/news-releases/notice-of-blackbaud-data-incident-301256301.html

swidup commented 3 years ago

https://timesofsandiego.com/crime/2020/07/29/ransomware-stole-donor-data-of-san-diego-charities-francis-parker-school/ Francis Parker School systems, San Diego Public Library Foundation

swidup commented 3 years ago

Iowa State Foundation https://www.kcci.com/article/iowa-state-foundation-confirms-ransomware-attack-through-third-party-source/33463838

swidup commented 3 years ago

Trinity Laban and Blackheath Halls https://www.trinitylaban.ac.uk/news/blackbaud-data-breach

swidup commented 3 years ago

University of Georgia https://news.uga.edu/information-about-blackbaud-security-incident/