I just got an email from the ACLU. I don’t think the ACLU had much about me other than public info and the email address I gave them…

We’re reaching out to let you know that the ACLU was notified of a security breach at one of our vendors, Blackbaud.

Blackbaud, which works with many nonprofits to support their fundraising and engagement efforts, was the target of a ransomware attack. As a result, the hackers obtained some personally identifying information about Blackbaud’s nonprofit clients’ donors and prospective donors, including those of the ACLU. Please note that no credit card or bank account information was compromised in this breach. A full description of the incident is available here. (note: this link will take you to a third party website, blackbaud.com)

Blackbaud believes they have successfully retrieved the stolen data, but we cannot be completely certain this is the case. The ACLU’s contractual agreements have always required Blackbaud to keep our constituent information confidential and to have security procedures in place to minimize breaches.

In all candor, we are frustrated with the lack of information we’ve received from Blackbaud about this incident thus far. The ACLU is doing everything in our power to ascertain the full nature of the breach, and we are actively investigating the nature of the data that was involved, details of the incident, and Blackbaud’s remediation plans.

We are also exploring all options to ensure this does not happen again, including revisiting our relationship with Blackbaud.