FAQs — Blackbaud Data Incident 2020
Q: Why did I receive a message about Blackbaud from Texas Woman’s University?
A: The TWU Foundation contracts with Blackbaud, a database and fundraising software provider used by more than 45,000 universities, foundations, healthcare institutions and other nonprofits around the world, to assist with the university’s fundraising efforts. Information is stored in a private, cloud-based environment provided by Blackbaud. Recently, the TWU Foundation was notified about a ransomware attack that occurred at Blackbaud in May 2020.
Q: What information was involved in this data security incident at Blackbaud?
A: On July 16, 2020, Blackbaud confirmed that a limited subset of publicly available information such as names, addresses, phone numbers, dates of birth and email addresses within the TWU Foundation account were accessed in the cybercriminal attack. However, according to the Blackbaud investigation, the cybercriminal did NOT access credit card data, usernames/passwords, bank account information or other non-publicly available information. On September 29, 2020, Blackbaud reported that forensic evidence indicated additional, unencrypted data fields may have been compromised. However, the TWU Foundation account DOES NOT store constituent data in those particular fields and no additional constituent data is at risk. Blackbaud and other third-party agencies, including law enforcement, continue monitoring the situation, and to date, have found no instances of any data being released. (Read Blackbaud’s statement about the incident.)
Q: What are Texas Woman’s University, the TWU Foundation and Blackbaud doing to address the situation?
A: We are working very closely with Blackbaud’s team and will distribute any new information about the data security incident. Blackbaud has already implemented and tested additional security measures to protect your data from any subsequent incidents. While data breaches and ransomware attacks are becoming more common, this is not an issue that Texas Woman’s University ever wants to happen to our valued supporters. We take your privacy very seriously, and we will continue to work with Blackbaud and law enforcement authorities to monitor this incident. We regret any inconvenience it may cause to you. If you have any questions or concerns, please email Dr. Kimberly A. Russell, Vice President of University Advancement, at email@example.com.
Q: What should I do?
A: There is no need to take any action at this time. However, as a best practice, continue to monitor your personal information online and report any suspicious activity to the appropriate authorities.
Page last updated 12:34 PM, October 14, 2020