Blackbaud Settles Multiple Data Breach Lawsuits for Millions

Cloud computing provider Blackbaud has agreed to a $49.5 million settlement with attorneys general from 49 U.S. states to resolve a multi-state investigation into a ransomware attack and subsequent data breach that occurred in May 2020. The breach compromised sensitive information of over 13,000 Blackbaud business customers and their clients, impacting millions of individuals. As part of the settlement, Blackbaud must implement a breach response plan, provide assistance to customers in the event of a breach, enhance employee training, improve security measures, and allow third-party assessments of its compliance for seven years. This settlement addresses allegations of violating consumer protection laws, breach-notification regulations, and HIPAA.