Verified case 1 of 1
Blackbaud
- Date
- not stated in the official release
- Amount
- $49.5 million total; Montana’s share: $388,649
- Legal basis
- state consumer protection laws, breach notification laws, and HIPAA
Why the action was brought
Blackbaud’s deficient security allowed unauthorized access to its network in a 2020 breach exposing highly sensitive constituent data—including contact and demographic information, Social Security and driver’s license numbers, financial, employment, wealth, donation, and health information—affecting 26 Montana organizations. It allegedly failed to remediate known gaps and provide timely, complete, accurate notice, delaying or preventing consumer notification.