Statement to Donors:
BC Cancer Foundation wishes to inform our supporters that one of our third-party service providers, Blackbaud, has recently experienced a ransomware attack that has impacted many of its clients around the world, including the BC Cancer Foundation.
We recently received notification from Blackbaud of a ransomware attack which occurred in May of 2020. The incident involved a cybercriminal who removed data for the purpose of extorting funds from Blackbaud, one of the world’s largest providers of education administration, fundraising and financial management software for non-profits. Blackbaud paid a ransom in exchange for the deletion of the extracted data.
The compromised data did not contain any financial or credit card information, this information is not stored in the database. Through an investigation, Blackbaud and law enforcement officials believe that no data went beyond the cybercriminal.
The specific types of personal information may have included; name, address, email and phone number, demographic information such as date of birth, age, marital status, donation information, and communication preferences.
Blackbaud has hired a forensic firm to monitor the internet and dark web as an extra precautionary measure for any signs of the breached data. In addition, BC Cancer Foundation has dark web monitoring underway for activity related to the data. The BC Cancer Foundation is committed to protecting the privacy of your personal information and adheres to legislated privacy requirements under PIPA.
As always, with an abundance of caution, you should remain vigilant about any email messages, text messages or phone calls that ask you to provide sensitive information or financial details.
We sincerely apologize for this incident.
We are committed to keeping donors informed and will notify individuals of any further and relevant information from Blackbaud. BC Cancer Foundation has notified the Office of The Information & Privacy Commissioner of British Columbia (OIPC).
If you have questions concerning this incident, please contact our Privacy Officer: firstname.lastname@example.org