FEDERALItem 8.01 · voluntaryHackingData ExfiltratedCustomer Data InvolvedPIIPHIHighResolved
BLACKBAUD, INC.
bd_b9a8d794be569611 · schema v1 · pii pii-v1
Full breach record for BLACKBAUD, INC. →Blackbaud, Inc. filed an 8-K on October 5, 2023, announcing the settlement of a multi-state investigation regarding a 2020 security incident. Blackbaud agreed to pay $49.5 million to 49 states and D.C. to resolve allegations related to a cyber criminal removing a subset of data from its environment. The settlement requires compliance with consumer protection laws, HIPAA, and improved cybersecurity programs. California's investigation remains unresolved.
SEC clockMateriality determined Oct 5, 2023 → Filed Oct 5, 20230d ✓ SEC 4-day OK
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.sec.gov/Archives/edgar/data/1280058/000128005823000040/
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Oct 5, 2023
- Raw hash
- 8409e918fb0e76bddc7e20f5b37b5e6683d2b5380c336d9dc7130376b9941837
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- BLACKBAUD, INC.norm: blackbaud
- SEC CIK
- 0001280058
- Domain
- blackbaud.com
Victim entity
- Name
- BLACKBAUD, INC.norm: blackbaud
- SEC CIK
- 0001280058
- Domain
- blackbaud.com
Incident
- Discovered
- —
- Materiality determined
- Oct 5, 2023
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 ChannelT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Resolved multi-state Civil Investigative Demand with 49 state Attorneys General and the District of ColumbiaResolved separate Civil Investigative Demand from the Office of the Indiana Attorney GeneralSeparate Civil Investigative Demand from the Office of the Attorney General of the State of California remains unresolved
Compliance
- Compliance flags
- SEC 4-day OK · 0d
- Discovery-date grounding
- no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
- Clock breakdown
Statute Window Elapsed Threshold Status SEC Materiality determined: Oct 5, 2023→ Filed: Oct 5, 20230d cal. 4 business days SEC 4-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.