Blackbaud Data Security Incident – August 2020

At Lollypop Farm, we take your privacy and security very seriously. I wanted to reach out to you directly, as a valued friend and supporter, about a security incident at one of our vendors that may have involved your personal information. Blackbaud Inc. is one of Lollypop Farm’s cloud-computing vendors and a multi-national provider to hundreds of major non-profits. Blackbaud has informed us that they were the target of a data security incident. After discovering the data incident, Blackbaud worked with independent forensic experts and law enforcement to expel the hacker from their systems. Blackbaud believes that they successfully retrieved the stolen data, but we can never be entirely certain, which is why you are receiving this message. Please note that the data security incident did not access credit card information, bank account information, social security numbers, or any other private financial data, nor did it impact Lollypop Farm’s internal systems. However, some personal information, such as names, addresses, and birthdates, may have been accessed. Upon learning of this incident in late July, we investigated Blackbaud’s response and remediation efforts. The cyber-security team at Blackbaud assured us they have no reason to believe any data was misused or will be disseminated, and has ongoing monitoring procedures in place to identify future potential risk. Blackbaud's statement on this attack is available on their website at blackbaud.com/securityincident. If we learn of any additional information pertinent to protecting your safety, we will notify you promptly. Again, we believe it is unlikely that the accessed information will be misused. Nonetheless, we want to assure you that we will continue working with Blackbaud to ensure they take the necessary steps to minimize the impact of this incident and prevent it from happening again. At the same time, we urge you to remain vigilant, as always, to the threat of identity theft. I deeply value your relationship with Lollypop Farm, and the confidentiality and security of your information are of the utmost importance. If you have any questions or concerns about this matter, please reach out to Ryan Hyde, our Manager of Database Analytics, at donations@lollypop.org. Sincerely, Alice Calabrese, CAWA President and CEO Lollypop Farm, Humane Society of Greater Rochester