Hydrocephalus Association reported a data breach involving its third-party vendor, Blackbaud Inc. Unauthorized access occurred between Feb 7 and May 20, 2020, resulting in the exfiltration of non-financial member data including names, addresses, dates of birth, and limited health information related to hydrocephalus. The attacker demanded payment, which Blackbaud made, claiming data destruction. The Association notified affected individuals on Sept 4, 2020, and is reviewing its vendor relationship.