Cyber Incident Victim: Food Bank of Central & Eastern North Carolina
Date:
May 2020
Location:
United States of America
Summary
The Food Bank of Central & Eastern North Carolina was affected by a widespread data breach at Blackbaud, a donor management software provider. The breach, caused by a ransomware attack, compromised donor data including names, titles, spouse's names, dates of birth, and contact details. No credit card or financial account information was stolen. The Food Bank notified donors and hired a data privacy attorney to investigate. Blackbaud assured that no Social Security numbers or bank information was compromised.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The Food Bank of Central & Eastern North Carolina was among the numerous non-profit organizations affected by a widespread data breach at Blackbaud, a prominent provider of donor management software. The breach, which was caused by a ransomware attack, resulted in the compromise of sensitive donor data, including names, titles, spouse's names, dates of birth, and contact details. Fortunately, no credit card or financial account information was stolen during the incident.
The Food Bank of Central & Eastern North Carolina was notified about the breach by Blackbaud, and subsequently, the organization hired a data privacy attorney to investigate the incident and provide guidance on how to respond. The attorney's assessment was that Blackbaud's response to the breach was thorough and adequate. Blackbaud had been cooperative with the Food Bank, sharing as much information as possible about the incident and the measures being taken to prevent similar breaches in the future.
The ransomware attack that led to the breach occurred at Blackbaud's facilities, where the company stores data on behalf of its clients, including the Food Bank of Central & Eastern North Carolina. The attackers gained unauthorized access to Blackbaud's systems and encrypted a subset of data, demanding a ransom in exchange for the decryption key. Blackbaud, however, was able to prevent the attackers from accessing the majority of its data, and the company was ultimately able to restore the encrypted data from backups.
The breach at Blackbaud had far-reaching consequences, affecting numerous non-profit organizations, universities, and other institutions that rely on the company's software to manage their donor data. The UNC System, for instance, was also affected by the breach, with several of its constituent institutions impacted by the incident. Planned Parenthood, another prominent non-profit organization, reported that most of its state-based organizations, including those in North Carolina, were impacted by the breach.
The incident highlights the importance of robust cybersecurity measures and the need for organizations to be prepared for potential breaches. Blackbaud's ability to restore the encrypted data from backups and prevent the attackers from accessing the majority of its data demonstrates the effectiveness of its disaster recovery and business continuity plans. However, the breach also underscores the risks associated with relying on third-party vendors to manage sensitive data.
The Food Bank of Central & Eastern North Carolina's response to the breach was prompt and transparent, with the organization notifying its donors about the incident and providing them with information about the data that was compromised. The organization also assured its donors that it does not store credit card or financial account information, which reduced the risk of financial harm to those affected by the breach.
The incident has also raised questions about the responsibility of third-party vendors in protecting sensitive data. Blackbaud, as a provider of donor management software, has a critical role to play in ensuring the security and integrity of the data entrusted to it by its clients. The company's response to the breach, including its decision to pay the ransom, has been subject to scrutiny, with some experts arguing that paying the ransom may have created a perverse incentive for the attackers to target other organizations.
The breach at Blackbaud serves as a reminder of the importance of robust cybersecurity measures and the need for organizations to be prepared for potential breaches. It also highlights the need for greater transparency and accountability in the way that third-party vendors handle sensitive data. As the use of donor management software and other cloud-based services becomes increasingly prevalent, it is essential that organizations prioritize the security and integrity of their data and take steps to mitigate the risks associated with relying on third-party vendors.