FTC Blasts Blackbaud’s ‘Shoddy’ Practices in Ransomware Hack [Video]

Fraud Management & Cybercrime , Healthcare , Industry Specific

FTC Is Latest Agency to Rebuke Fundraising Firm for Lax Security in 2020 Attack (HealthInfoSec) • February 1, 2024    

The Federal Trade Commission is the latest regulatory agency taking action against fundraising and customer relationship management software provider Blackbaud in the aftermath of a 2020 ransomware incident that compromised the data of tens of thousands of clients and millions of consumers.

See Also: OnDemand Panel | Securing Operational Excellence: Thwarting CISOs 5 Top Security Concerns

The FTC on Thursday said it has ordered South Carolina-based Blackbaud to delete personal data that is no longer needed and to implement a long list of security improvements in the wake of the hack that affected millions of Social Security and bank account numbers (see: Blackbaud Expects Cyber Insurer Will Cover Most Attack Costs).

“Blackbaud’s shoddy security and data retention practices allowed a hacker to obtain …