Blackbaud Incident May Affect Some Supporters
As alumni and supporters of the Bemidji State University Alumni & Foundation, we want you to know about an incident that may have involved your personal contact information.
In July, we were notified by Blackbaud, a company that provides Bemidji State University Alumni & Foundation with data management and software services, that they had experienced a data security incident. You may have already received a notification about this incident from other nonprofits you support, as Blackbaud’s fundraising and database services are used by thousands of nonprofit organizations worldwide and 15 of the 37 institutions of higher education in the Minnesota State System.
What's Important to Know
No credit card, bank account, or other unique and sensitive information, such as social security number, was compromised.
Blackbaud was the target of a ransomware attack sometime between February 7, 2020, and intermittently until May 20, 2020. The hackers attempted to disrupt business by locking users out of their own data and in the process, accessed personally identifying information about Blackbaud's nonprofit clients, including those of the Bemidji State University Alumni & Foundation. Blackbaud informed us of the breach on July 16, 2020.
After discovering the attack in May 2020, Blackbaud’s Cyber Security team—together with independent forensics experts and law enforcement—retrieved the stolen data and successfully prevented the cybercriminal from blocking their system access and fully encrypting files, and ultimately expelled them from the system.
The Minn State system IT and legal team launched an independent investigation on July 16 and sent us their confirmation of Blackbaud’s findings. We took the time to verify Blackbaud’s findings through the independent investigation before sending this message to our supporters.
What We Are Doing
We sincerely apologize for this incident and regret any inconvenience it may cause. We take data security very seriously, along with the trust you place in us. We are confident in Bemidji State University Alumni & Foundation's internal data security and privacy practices and will continue to work with Blackbaud to ensure your privacy and security is not compromised.
What You Can Do
As a best practice, we recommend you remain vigilant and promptly report any suspicious activity or suspected identity theft to us and to the proper law enforcement authorities such as the Federal Trade Commission, and the Office of the Minnesota State Attorney General.
If you have questions, concerns or would like specific information about your personal data please contact Josh Christianson, Executive Director for University Advancement, via email at firstname.lastname@example.org.