Blackbaud, Inc. data breach (2023)

Breach window

Jan 1, 2020 → Dec 31, 2020

When the intrusion reportedly occurred, per the linked filings

1,373 days

Materiality determined

Oct 5, 2023

Registrant determined the incident material — starts the SEC 4-business-day clock

FEDERALSEC 8-KFirst filing

Filed Oct 5, 2023bd_b9a8d794be569611

Blackbaud, Inc. filed an 8-K on October 5, 2023, announcing the settlement of a multi-state investigation regarding a 2020 security incident. Blackbaud agreed to pay $49.5 million to 49 states and D.C. to resolve allegations related to a cyber criminal removing a subset of data from its environment. The settlement requires compliance with consumer protection laws, HIPAA, and improved cybersecurity programs. California's investigation remains unresolved.

SEC 4-day OK · 0d

BLACKBAUD, INC.

Litigation Timing

Timeline