Hispanic Association of Colleges and Universities

Hispanic Association of Colleges and Universities (HACU) notified the New Hampshire Attorney General of a security incident involving its vendor, Blackbaud, Inc. Blackbaud experienced a ransomware attack in May 2020, with unauthorized access occurring between February 7 and May 20, 2020. The attack resulted in the exfiltration of backup files containing donor names and Social Security numbers. HACU determined one New Hampshire resident was affected. HACU mailed a notification letter on April 6, 2021, and offered one year of credit monitoring through Kroll. Blackbaud paid a ransom and confirmed the stolen files were destroyed.