George W. Bush Center hacked; ransom paid in exchange for apparent destruction of stolen donor data
Saturday, August 1, 2020
https://www.washingtontimes.com/news/2020/aug/1/george-w-bush-center-hacked-ransom-paid-in-exchang/
The George W. Bush Presidential Center was the victim recently of a hack attack that resulted in an undisclosed sum being paid to the perpetrator, the organization announced Friday.
Unencrypted data involving the Bush Center’s donors, including names, contact information and contribution history, was compromised during a May security breach, the organization said on its website.
The donor data was stolen during an attack suffered by Blackbaud, a third-party data management service used by the Bush Center, but has supposedly since been destroyed.
“Blackbaud informed us that it paid a ransom to the attackers in order to obtain confirmation that the compromised unencrypted information has been destroyed,” the Bush Center said in a statement.
“To date, there is no indication that any of the compromised unencrypted information is subject to further disclosure or misuse, and given the intent of the criminals to obtain the payment of the ransom, the Bush Center does not believe there is a high risk that the unencrypted information would be used for other purposes,” the statement said.
Blackbaud acknowledged compensating whoever stole the data but stressed the worst of the breach was likely behind them.
“Based on the nature of the incident, our research, and third party (including law enforcement) investigation, we have no reason to believe that any data went beyond the cybercriminal, was or will be misused; or will be disseminated or otherwise made available publicly,” Blackbaud said in a separate statement. “We apologize that this happened and will continue to do our very best to supply help and support as we and our customers jointly navigate this cybercrime incident.
Social Security numbers of donors were stolen as well, according to the Bush Center. That data was encrypted, however, and the decryption keys needed to decipher it was stored separately and not stolen, the center said.
Opened in 2013, the Bush Center is located on the campus of Southern Methodist University near Dallas, Texas. The complex contains a museum as well as Mr. Bush’s presidential library.
https://en.wikipedia.org/wiki/Blackbaud
Blackbaud (NASDAQ:BLKB) is a cloud computing provider that serves the social good community — nonprofits, foundations, corporations, education institutions, healthcare organizations, religious organizations, and individual change agents. Its products focus on fundraising, website management, CRM, analytics, financial management, ticketing, and education administration.[1][2][3][4][5]
Blackbaud's flagship product is a fundraising SQL database software, Raiser's Edge.[1] Revenue from the sale of Raiser's Edge and related services accounted for thirty percent of Blackbaud's total revenue in 2012.[1] Other products and services include Blackbaud Enterprise CRM, Altru, Financial Edge, Education Edge, Blackbaud NetCommunity, eTapestry, Luminate Online, Luminate CRM, Friends Asking Friends.[1] In addition, Blackbaud offers consultancy services to nonprofit organizations.[1]
Blackbaud was founded in 1981 by Anthony Bakker.[1][6] The company is headquartered in Daniel Island, Charleston, South Carolina[7]. It has regional offices in Austin, Oakland, San Francisco, San Diego, Washington, D.C., Indianapolis, New York City, St. Paul, Minnesota, Bedford, New Hampshire, and Boston.[8] Its Microedge division has offices in New York, New York and Edina, Minnesota. Its K12 group has an office in Bedford, New Hampshire. Its SmartTuition division has an office in Woodbridge Township, New Jersey. Internationally, Blackbaud has offices in London, England; Sydney, Australia; Toronto, Canada; and Wan Chai, Hong Kong.[9]
Michael Gianoni is Blackbaud's CEO.