Skip to main content

Blackbaud Data Breach

10 August 2020

We want to notify our supporters of a data breach that one of our suppliers has suffered. We use fundraising software that is provided by a company called Blackbaud and we store our back up data with them. They have had a cyber-attack and now notified us.

What happened?

Blackbaud suffered a sophisticated cyber-attack often called a ransomware attack. The cybercriminals attempted to stop Blackbaud from accessing their own systems, copy their data, and charge Blackbaud for access. Blackbaud paid the fee with confirmation that the copied data had been destroyed.

What was taken?

A copy of the data we hold was taken which includes information such as contact details, dates of birth, and email addresses. They will also have taken some financial data however this is encrypted and is very, very difficult to access. The full list of what was taken is available here: Please note they did not access copies of bank account or credit card information.

What has Blackbaud done?

The incident was reported to law enforcement. Internal and external investigations are being conducted, the Information Commissioner has been notified and all organisations, such as Capability Scotland, were notified.

What has Capability Scotland done?

We have notified the Information Commissioner and notified those impacted by this. For those we cannot contact directly, we have published this notification here.

Who has my data?

Blackbaud have no reason to believe that any data went beyond the cybercriminals. Blackbaud have however employed a team of experts to monitor the dark web as an additional precaution.

What do I need to do?

Whilst there is no specific action to take, it is sensible to be vigilant with regards to reviewing any correspondence or communications that you receive, especially if these are new. Fuller details and information is available from the ICO:

Where can I get more information?

Blackbaud have published more information here:

We are very sorry that this has happened and we will review our arrangements with Blackbaud in due course. If you have any questions or queries regarding this matter please do not hesitate to contact us and we will do our best to help.