August 11 2020
Be The Match Foundation was informed on July 16, 2020, that one of our vendors, Blackbaud, experienced a data security incident in May of this year. Blackbaud is a cloud service used by many nonprofit institutions to manage various aspects of their operations. Be The Match recognizes that our constituents may have read about this incident in the press and wishes to clarify the impact on our organization.
Be The Match maintains contact and basic contribution information for individuals who engaged with, or otherwise consented to be contacted by, Be The Match Foundation, from 1999 to present, on Blackbaud’s system. If you made a contribution to Be The Match Foundation, registered for a fundraising event, or otherwise consented to receive information from the Be The Match Foundation, your personal information (as described below in this statement) may have been impacted.
Be The Match requires our service providers, including Blackbaud, to store credit card and other financial and sensitive information in an encrypted fashion. Therefore, no confidential or financial information, specifically including social security numbers, bank accounts, or credit card information, was compromised. However, a subset of the data that Be The Match maintains on Blackbaud was accessed before Blackbaud was able to stop the attack. This information included the names, addresses, dates of birth, and charitable donation amounts (if applicable) of our sponsors, contributors, and other constituents. Blackbaud has assured Be The Match that “[b]ased on the nature of the incident, our research, and third party (including law enforcement) investigation, we have no reason to believe that any data went beyond the cybercriminal, was or will be misused, or will be disseminated or otherwise made available publicly.” Given that, we do not believe it is necessary for you to take any further action at this time; however, as an ongoing best practice, we encourage you to monitor your online and financial activity and report anything suspicious. Be The Match remains in communication with Blackbaud, who continues to work with forensic experts to monitor the situation.
Additional information:
Be The Match takes cyber-threats seriously, and we are committed to holding Blackbaud accountable and keeping your personal information safe and secure. As always, we value your relationship with Be The Match and your support of our life saving mission.
If you have additional questions, please reach out to the Be The Match Data Privacy Office at dpo@nmdp.org.