Blackbaud data security incident - an update

Back in July, we shared news that we had been affected by a data security incident targeting Blackbaud, the company who supply our database. You can read our statement regarding this by clicking here.

This week, Blackbaud provided us with new information, specifically that our login details for Blackbaud's donation processing service, which we use alongside our database to collect donations on our website, were potentially accessed. 

While this is concerning news, for Boaz and our supporters nothing has changed in terms of what data may have been potentially accessed. This is because we only use Blackbaud's donation processing service to collect card payments, the details of which were encrypted, stored separately and not compromised. Organisations who use Blackbaud's data processing service more widely, for example to set up and collect regular direct debits, may have been affected in different ways, and this is why you may hear directly from other organisations and institutions about this situation.

Blackbaud continue to state that based on the nature of the incident, their research, and third-party (including law enforcement) investigation, they have no reason to believe that any data went beyond the cybercriminal, was or will be misused, or will be disseminated or otherwise made available publicly. As ever, we continue to recommend that you remain vigilant and if you notice any unusual or suspicious activity that concerns you, please report it to the police.  

If you have any questions about this, please do not hesitate to contact us. 

We are continuing to take this issue very seriously. We have reported the original breach to the ICO and Charity Commission in line with our GDPR processes. We have updated the relevant passwords on our systems and made sure that they are secure. Please be assured that we will continue to do what we can to ensure that your personal information is secure.  You can find out more about how we handle your personal information by reading our Privacy Policy and you can contact us any time with any questions you have about this or any changes you would like to request in terms of how we communicate with you.

Thank you for your continued understanding and support.