The Food Bank of Central & Eastern North Carolina (the Food Bank) takes privacy and data security very seriously, and values the trust placed in our organization to protect personal information. Out of an abundance of caution, we are writing to inform you about a data security incident that occurred involving Blackbaud, a Food Bank vendor and provider of fundraising and donor management solutions for numerous not-for-profit organizations and public universities.
In July, Blackbaud contacted the Food Bank to advise that it had been the victim of a ransomware attack that occurred in May 2020. The cybercriminal was able to remove a copy of a subset of Blackbaud’s clients’ data, which included some of the Food Bank’s database.
The Food Bank immediately launched an internal investigation to assess the information provided by Blackbaud and confirmed that the only information compromised is that which is already publicly available:
- Public biographical information such as name, title, date of birth, spouse/marital status
- Contact details such as mailing addresses, phone numbers, and e-mail addresses
All sensitive private information, such as credit card or financial account numbers, remained secure and was not accessed. Also, key to note, the Food Bank does not manage or store this information.
Blackbaud worked with law enforcement and engaged counsel and data breach experts to review the incident. You can learn more about this incident on Blackbaud’s website here. Based on these actions and the conclusions from their investigation, Blackbaud advised the Food Bank that there is no need for you to take any action at this time. After consulting with information security legal counsel, the Food Bank determined that the absence of sensitive private information from the affected data supports Blackbaud’s conclusion. Even so, prioritizing caution and as a reasonable best practice, we recommend remaining vigilant and promptly reporting any suspicious activity or suspected identity theft to authorities and your financial institutions. The Food Bank and Blackbaud continue to monitor and take action to ensure your information is and remains protected.
We are sincerely grateful for your dedication to our mission and apologize that this security incident occurred. If you have any questions, please contact: Samantha Wright, Director of Development Operations & Analytics, at firstname.lastname@example.org.