We were recently notified about a data security incident our third-party vendor, Blackbaud Inc., experienced. The Endangered Wolf Center takes the protection and proper use of your information very seriously.
At this time, we understand that Blackbaud discovered and stopped a ransomware attack. After discovering the attack, Blackbaud’s Cyber Security team—together with independent forensics experts and law enforcement— successfully prevented the cybercriminal from blocking their system access and fully encrypting files; and ultimately expelled the threat from their system. Prior to locking the cybercriminal out, the cybercriminal removed a copy of a backup file which contained some information about our donors. This occurred at some point beginning on February 7, 2020 and continued through May 20, 2020, during which time the cybercriminal could have been intermittently attempting to access data.
It’s important to note that, according to Blackbaud’s investigation, the cybercriminal did not access credit card information, bank account information, or social security numbers. However, we have determined that the file removed may have contained contact information, demographic information, and a history of donors’ relationships with our organization, such as donation dates and amounts and events attended. As part of its response efforts, Blackbaud paid the cybercriminal’s demand and received confirmation that the copy that was removed had been destroyed. Based on the nature of the incident, Blackbaud’s research, and third party (including law enforcement) investigation, Blackbaud has informed us that it has no reason to believe that any data went beyond the cybercriminal, was or will be misused, or will be disseminated or otherwise made available publicly.
We sincerely apologize for this third-party vendor breach and regret any inconvenience it may cause. Should you have any further questions or concerns regarding this matter and/or the protections available to you, please do not hesitate to contact our office at (636) 938-9306 or [email protected] Below is a link to an account of what transpired as it has been communicated to us by our service provider.
For more information you can visit www.blackbaud.com/securityincident