Polycystic Kidney Disease Foundation
bd_b57c6e4ad281bdde · schema v1 · pii pii-v1
Full breach record for Polycystic Kidney Disease Foundation →Polycystic Kidney Disease Foundation notified members of a data breach involving their CRM provider, Blackbaud. A ransomware attack on a Blackbaud service provider in May 2020 led to the exfiltration of a subset of data, including names, contact details, philanthropic interests, and transplant status. Financial data and SSNs were encrypted and not accessed. Blackbaud paid the ransom and claims data was destroyed. The Foundation launched its own investigation and notified affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
May 1, 2020
Begins
Jul 16, 2020
Discovered
Sep 4, 2020
Filed
vs. sector median
5 wks faster
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- Oregon State AGbd_3c4211f7da1c5a0f2020-09-04Verified
- Montana State AGbd_aacdada4b0a038fd2020-09-04Verified
- Delaware State AGbd_f7d100553c5317872020-09-04Verified
- Washington State AGbd_2e56f6d9b3a2f1ba2020-09-03 · +1dCandidate
Filing propagation · 5 filings · 5 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.