American Symphony Orchestra League

American Symphony Orchestra League reported a ransomware attack on third-party vendor Blackbaud in May 2020. Attackers exfiltrated donor PII (names, addresses, donation history) before being expelled. Blackbaud paid ransom and confirmed data destruction. 1,355 Washington residents affected. Notifications sent in October 2020.

American Symphony Orchestra League, a non-profit organization, reported a data breach affecting 49,063 individuals. The breach, described as an external system breach (hacking), occurred on May 1, 2020, and was discovered on August 1, 2020. Affected individuals were notified electronically on October 5, 2020.

Blackbaud, a database vendor serving the League of American Orchestras (American Symphony Orchestra League), suffered a ransomware attack in which a cybercriminal removed a backup file containing donor/constituent personal information (names, addresses, phone numbers, email, demographic data, donation history). No credit card, bank account, or SSN data was involved. Blackbaud paid the ransom and obtained confirmation the data was destroyed. The letter was sent October 2020.

League of American Orchestras notified Montana residents of a ransomware attack on third-party vendor Blackbaud. Attackers exfiltrated a backup file containing PII (names, addresses, donation history) before being expelled. Blackbaud paid the ransom and confirmed data destruction. No SSN or credit card data was accessed. Incident status is contained.

American Symphony Orchestra League reported a data breach to the Oregon Attorney General. The breach was reported on 2020-10-05. The breach occurred during 5/1/2020. The breach was discovered on 8/1/2020. 49,063 individuals were affected. Notice was sent on 10/5/2020.

American Symphony Orchestra League (dba League of American Orchestras) reported a third-party vendor breach involving Blackbaud. A ransomware attack in May 2020 led to exfiltration of donor data (names, addresses, phone, demographics, donation history) from 161 NH residents. Blackbaud paid ransom and confirmed data destruction. League notified donors and CRAs in Oct 2020.