Ambrose Response to Blackbaud Data Breach

Ambrose Response to Blackbaud Data Breach

On Thursday,  July 16, 2020, Ambrose University received notification from Blackbaud of a ransomware attack which occurred in May of 2020. The cybercriminal removed data for the purpose of extorting funds from Blackbaud, one of the world’s largest providers of education administration, fundraising, and financial management software for non-profits.

The copy of data that the cybercriminal removed may have included the impacted individual's name and contact information. The compromised database did not contain any credit card information. Further, the cybercriminal had no access to bank account information, usernames, passwords, or social insurance numbers because these were encrypted.

All impacted individuals have been contacted directly. This incident has been reported to the Office of the Information and Privacy Commissioner of Alberta.

Based on their research, Blackbaud and law enforcement officials believe that no data went beyond the cybercriminal. Nonetheless, they have hired a third-party team of experts to monitor the dark web as an extra precautionary measure. Ambrose is working closely with Blackbaud to mitigate any further risk of exposure and will continue to deploy security-monitoring technologies aimed at malicious attempts to access Ambrose information.

If you have questions concerning this unauthorized access of data, please contact the Ambrose Privacy Officer at privacy@ambrose.edu.

General