Boy Scouts Hacked?

Well.. it wasn't just the Boy Scouts.

And it's worse.

The hack started with Blackbaud, a giant technology and service provider to nonprofits. Blackbaud helps organizations engage their donor network all the way through to fundraising and financial management.

"Prior to our locking the cybercriminal out, the cybercriminal removed a copy of a subset of data from our self-hosted environment." - Blackbaud statement

It just so happened that Blackbaud's announcement coincided with the notorious hack at Twitter. Hmm....

Next up, class action lawsuits?

Blackbaud works with over "45,000 nonprofits, foundations, companies, educational institutions, and health care organizations internationally." The Boy Scouts are just one of those 45,000 organizations who trust Blackbaud with critical data and analytics.

The list of compromised clients spans the globe, from the Human Rights Watch in New York to the National Trust in the UK and even over to universities in Ireland. Subsequently, Human Rights Watch announced it ended its relationship with Blackbaud.

Because protecting our customers' data is our top priority, we paid the cybercriminal's demand with confirmation that the copy they removed had been destroyed." - Blackbaud statement

So they paid the ransom, and will continue crossing their fingers, hoping the criminals really did delete all that data.

These attacks can be stopped.

Are you ready to take action?
We make it easy to protect your team from attacks just like this one. Find out how to protect your team with INFIMA's Automated Security Awareness platform.

To get a quote, set up a call with our (non-pushy) team here!

Original articles here and here.
[https://nonprofitquarterly.org/blackbaud-pays-ransom-demand-but-how-much-damage-is-done/]
[https://www.theregister.com/2020/07/17/blackbaud_paid_ransomware/]