A total of 125 UK organisations have contacted the Information Commissioner’s Office so far to report they have been affected by the Blackbaud data breach, including leading charities the National Trust, Sue Ryder, Young Minds and Crisis, as the fallout from the ransomware incident continues.
The University of York was the first UK organisation to reveal its data had been compromised last week, demanding to know why it had taken Blackbaud nearly two months to inform its customers of the breach.
Earlier this week, UK charities Crisis and Young Minds joined the list, along with Oxford Brookes University, Loughborough University, University of London, University of Leeds and University of Reading.
Last week, Blackbaud tried to play down the incident, insisting that no payment card or bank account details had been compromised. However, it has now been revealed that equally sensitive information, including name, age and address; assets and estimated wealth; value of past donations; history of political and philanthropic gifts; and spouse’s identity and gift-giving history has been leaked in some cases.
The National Trust said that data on its fundraising and volunteering communities had been compromised in the attack, but it did not impact information on its wider 5.6 million members.
Chief information officer Jon Townsend told the BBC: “We are currently in the process of identifying and informing those affected. We have reported the incident to the ICO and the Charity Commission.”
The list of universities and colleges affected includes:
ACS International Schools
Aberystwyth University
Brunel University, London
Brasenose College, University of Oxford
De Montfort University
Hughes Hall College, University of Cambridge
Heriot-Watt University, Edinburgh
King’s College, London
Loughborough University
Oxford Brookes University
Robert Gordon University
St Albans School, Hertfordshire
Selwyn College, University of Cambridge
Staffordshire University
Sheffield Hallam University
University College, Oxford
University of Birmingham
University of Aberdeen
University of Bristol
University of Exeter
University of Durham
University of Kent
University of Glasgow
University of Liverpool
University of Leeds
University of London
University of Newcastle
University of Manchester
University of Northampton
University of Reading
University of Sussex
University of South Wales
University of Strathclyde
University of York
Meanwhile, UK charities which have been caught up in the incident include:
Young Minds
The National Trust
Action on Addiction
Breast Cancer Now
Maccabi GB
Choir with No Name
Crisis
Sue Ryder
The Wallich
The Urology Foundation
The ICO has confirmed that 125 British organisations had already contacted it in relation to the breach. A spokeswoman said: “Blackbaud has reported a data breach incident which has potentially affected a large number of UK organisations using its services and we are making enquiries.”
Related stories
Crisis donors hit as fears grow over Blackbaud breach
Clients demand answers as cloud giant admits breach
Pitney Bowes hit as Maze ransomware strikes again
Ransomware car crash hits digital transformation giant
Half of UK firms would pay ransom to avoid GDPR fine
Over 40% of firms suffered cyber breach in past year
Firms warned over new wave of nefarious cyber attacks
TNT Express rocked as cyber attack wipes out $300m
WPP hit as new ransomware attack wreaks global havoc
UK firms ‘leaving themselves wide open to ransomware’