Please ensure Javascript is enabled for purposes of website accessibility

Froedtert, Planned Parenthood, University School, Marquette among impacted in Blackbaud Data Breach

By: Steve Schuster, [email protected]//October 11, 2023//

Froedtert South Hospital Kenosha Staff Photo Steve Schuster

Froedtert, Planned Parenthood, University School, Marquette among impacted in Blackbaud Data Breach

By: Steve Schuster, [email protected]//October 11, 2023//

Listen to this article

Froedtert and the Medical College of Wisconsin, along with Planned Parenthood, University School of Milwaukee, and Marquette University are just a few of the well known Wisconsin names impacted by the recent Blackbaud security breach. The full list provided to the Wisconsin Law Journal from the Wisconsin Department of Justice reveals that dozens over organizations throughout the Badger State were impacted.

The Wisconsin Law Journal reached out to the above organizations, but no one has responded prior to publication.

Blackbaud security breach Wisconsin victims

Access Community Health Centers Inc
Acts 1:8 Ministry
Advocates Of Ozaukee
Agnesian Healthcare Foundation
Agrace HospiceCare
AIDS Network of Madison, WI
AIDS Resource Center of Wisconsin
Aldo Leopold Nature Center
Alliance on Mental Illness of Racine County Inc
Alverno College
American Legion – Department of Wisconsin
Archdiocese of Milwaukee
Aurora Health Care Foundation, Inc.
Autism Society of Wisconsin
Beloit College
Beloit Health System Foundation, Inc.
Bethesda Lutheran Communities
Betty Brinn Children’s Museum
Big Brothers Big Sisters of Dane County
Birch Creek Music Performance Center
Blackhawk Technical College Foundation
Boy Scouts of America – Bay Lakes Council
Boys & Girls Club of Greater Milwaukee
Boys & Girls Clubs of Green Bay
Camp Jorn YMCA
Cardinal Stritch University
Carroll University
Carthage College
Catalpa Health Inc
Catholic Charities of Archdiocese of Milwaukee
Catholic Charities of the Diocese of LaCrosse
Catholic Memorial High School
Cedar Community
Center for Railroad Photography and Art, Inc.
Cerebral Palsy
Children’s Hospital of Wisconsin Foundation
Childrens Museum of Eau Claire Inc
Childrens Museum of Fond Du Lac Inc.
Children’s World Impact
Clearwater Camp Foundation
Columbia St. Mary’s Foundation
Community Memorial Foundation
Community Shares of Wisconsin
Covenant Harbor Bible Camp
Curative Care Network Inc.
Dane County Humane Society
Diocese of La Crosse
Diocese of Superior
Discovery World LTD
Divine Savior Holy Angels High School
Domestic Abuse Intervention Services
Dominican High School
Door County YMCA
Eastcastle Place
Edgewood College
Edgewood High School
Endometriosis Association
Feeding America Eastern Wisconsin
Fisher House Wisconsin
Forest Springs Camp and Conference Center Inc
Foundation for Madison’s Public Schools Inc
Fox Cities Building for the Arts Inc.
Fox Cities Performing Arts Center
Fox Valley Lutheran High School
FreedomProject Education
Friends of Freedom Park
Friends of Wisconsin Public Television
Froedtert Health
Gateway Technical College Foundation
Gay Straight Alliance for Safe Schools
GPS Education Partners
Grant Regional Health Center
Great Marriages
Greater Milwaukee Committee for Community Development
Green Bay Botanical Garden
Green Bay Packers, Inc.
Green Lake Conference Center
Green Valley Enterprises
Gundersen Lutheran Medical Foundation, Inc.
Habitat for Humanity of Dane County
Harbor House Domestic Abuse Programs
HealthNet of Rock County
Help of Door County Inc.
Heritage Hill Corporation
Heritage Hill Foundation
Home Health United
Howard Young Foundation, Inc.
Hunger Task Force, Inc.
Independence First
Integrated Community Solutions
International Children’s Fund
International Crane Foundation
Jewish Home and Care Center
Journey House
Jubilation Ministries, Inc
Junior Achievement of Wisconsin, Inc.
Kenosha Public Museum Foundation Inc.
Kingdom Workers
La Crosse Area Family YMCA Inc.
Lakeland Pantry
Lakeshore Technical College
Lakeside Lutheran High School
LindenGrove
Lutheran Association of Missionaries and Pilots – U.S.
Lutheran High School Association of Greater Milwaukee
Lutheran Homes and Health Services Foundation, Inc.
Lutheran Social Services
Madison Area Technical College Foundation
Madison Country Day School
Madison Museum of Contemporary Art
Madison Public Library Foundation
Madison Symphony Orchestra
Marcus Center for the Performing Arts Inc
Marquette University
Marquette University High School
Marshfield Clinic Health System Foundation
Medical College Of Wisconsin
Memorial Hospital of Boscobel Foundation, Inc.
Memorial Medical Center
Meriter Foundation
Messmer High School
Milwaukee Area Technical College Foundation, Inc.
Milwaukee Ballet Company
Milwaukee Center for Independence
Milwaukee Christian Center
Milwaukee County Historical Society
Milwaukee Debate League
Milwaukee Jewish Free Loan Association
Milwaukee Parks Foundation Inc
Milwaukee Public Library Foundation
Milwaukee Public Museum, Inc.
Milwaukee Public Television – MPTV
Milwaukee Rescue Mission

Milwaukee School of Engineering
Milwaukee Symphony Orchestra, Inc.
Ministry Health Care, Inc.
Moraine Park Technical College Foundation
Mount Mary University
Museum of Wisconsin Art
Nashotah House
National Council on Crime and Delinquency
National Credit Union Foundation
National Forensic League
NE Wisconsin Tech. College Educational Foundation, Inc.
Neville Public Museum of Brown County
NEW Zoo
Newcap Inc.
Next Door Foundation, Inc.
Northland College
Notre Dame de la Baie Academy
Oakwood Foundation, Inc.
Oconomowoc Area Foundation Inc
One City Schools
Open Sky Education Inc.
Oshkosh Public Museum
Pearls for Teen Girls Inc
Pius XI High School
Planned Parenthood of Wisconsin, Inc.
Polk County Administration
Primary Connection Health Care
ProHealth Care, Inc.
Red Caboose Day Care Center
Relevant Radio, Inc.
Ripon College
Ripon Medical Center
Rogers Memorial Hospital Foundation, Inc
Roman Catholic Diocese of Madison, Inc
Ronald McDonald House Charities of Madison
Saint Augustine University Parish
Saint Coletta of Wisconsin, Inc.
Saint Francis de Sales Seminary
Saint Mary’s Home for the Aged
Saint Thomas More High School
SaintA, Inc.
Sauk Prairie Healthcare Foundation
School Sisters of St. Francis, Inc.
Second Harvest Foodbank of Southern Wisconsin
Select Milwaukee
Sharon S. Richardson Community Hospice Inc.
Shepherds Baptist Ministries
Shoreland Lutheran High School
Shorewood SEED Foundation
Shrine of Our Lady of Guadalupe INC
Siena Catholic Schools of Racine, Inc.
Silver Spring Neighborhood Center
Social Development Commission
Society of St. Vincent de Paul – Madison
Society of the Divine Savior
Sojourner Family Peace Center
Soles for Jesus
South Wisconsin District of the Lutheran Church Missouri-Synod
South-Central Synod of Wisconsin
Special Olympics Wisconsin, Inc.
SSM Health Care of Wisconsin, Inc.
St Paul University Catholic Foundation Inc
St. Clare Health Care Foundation, Inc.
St. Francis Xavier Catholic School System
St. Joseph Academy
St. Joseph’s Community Foundation Inc
St. Margaret Mary School
St. Mary’s Janesville Hospital Foundation
St. Mary’s Springs Academy
St. Norbert College
Stateline Community Foundation
Stoughton Hospital Foundation, Inc.
Stout University Foundation
Teen Challenge Wisconsin
The 16th Street Community Health Center
The Bryon Riesch Paralysis Foundation
The Catholic Foundation
The Center for Veterans Issues, Ltd.
The Children’s Museum of Green Bay
The Cornucopia Institute
The Prairie School
The Ridges Sanctuary
The Wisconsin FFA Foundation
ThedaCare
ThedaCare Family of Foundations, Inc.
Thelma Sadoff Center for the Arts
United Community Center
University Lake School
University of Wisconsin – Oshkosh Foundation
University of Wisconsin Eau Claire Foundation
University of Wisconsin Foundation
University of Wisconsin- Green Bay Foundation
University of Wisconsin-LaCrosse Foundation
University of Wisconsin-Parkside Foundation
University of Wisconsin-Stevens Point Foundation, Inc
University of Wisconsin-Superior Foundation Inc.
University of Wisconsin-Whitewater Foundation, Inc.
University School of Milwaukee
Upland Hills Health Inc
Urban Day School
Urban Ecology Center
UWM Foundation
UWM Foundation Inc
UW-Platteville Foundation, Inc.
Versiti Blood Research Institute Foundation, Inc.
Viterbo University
Wayland Academy
We Energies Foundation
West Allis-West Milwaukee School District
Western Technical College Foundation
Wingra School
Wisconsin Chamber Orchestra
Wisconsin Council of Churches
Wisconsin Equal Justice
Wisconsin Evangelical Lutheran Synod
Wisconsin Historical Foundation, Inc.
Wisconsin Humane Society
Wisconsin Judicare
Wisconsin Lutheran College
Wisconsin Lutheran High School
Wisconsin Masonic Home, Inc.
Wisconsin Public Radio Association
Wisconsin Public Service Foundation
Wisconsin Women’s Health Foundation
WITC Foundation
Women’s Fund of Greater Milwaukee
Workforce Connections, Incorporated
WUWM
YMCA of Metropolitan Milwaukee
Youth Services of Southern Wisconsin Inc.
YWCA of Greater Green Bay
YWCA of Madison

As previously reported by the Wisconsin Law Journal, Wisconsin Attorney General Josh Kaul announced Friday Wisconsin, along with 49 other attorneys general, had reached a settlement with software company Blackbaud for its deficient data security practices and response to a 2020 ransomware event that exposed the personal information of millions of consumers across the United States. Under the settlement, Blackbaud has agreed to overhaul its data security and breach notification practices and make a $49.5 million payment to states. Wisconsin will receive $ 796,136.00 from the settlement.

“Companies entrusted with personal information about consumers must effectively safeguard that information,” said Kaul.

“And if a breach occurs, consumers must be notified promptly,” Kaul added.

Blackbaud provides software to various nonprofit organizations, including charities, higher education institutions, K-12 schools, healthcare organizations, religious organizations, and cultural organizations. Blackbaud’s customers use Blackbaud’s software to connect with donors and manage data about their constituents, including contact and demographic information, Social Security numbers, driver’s license numbers, financial information, employment and wealth information, donation history, and protected health information. This type of highly sensitive information was exposed during the 2020 data breach, which impacted over 13,000 Blackbaud customers and their respective consumer constituents.

Friday’s settlement resolves allegations of the attorneys general that Blackbaud violated state consumer protection laws, breach notification laws, and HIPAA by failing to implement reasonable data security and remediate known security gaps, which allowed unauthorized persons to gain access to Blackbaud’s network, and then failing to provide its customers with timely, complete, or accurate information regarding the breach, as required by law. As a result of Blackbaud’s actions, notification to the consumers whose personal information was exposed was significantly delayed or never occurred at all insofar as Blackbaud downplayed the incident and led its customers to believe that notification was not required.

Under the settlement, Blackbaud has agreed to strengthen its data security and breach notification practices going forward, including:

  • Prohibition against misrepresentations related to the processing, storing, and safeguarding of personal information; the likelihood that personal information affected by a security incident may be subject to further disclosure or misuse; and breach notification requirements under state law and HIPAA.
  • Implementation and maintenance of incident and breach response plans to prepare for and more appropriately respond to future security incidents and breaches.
  • Breach notification provisions that require Blackbaud to provide appropriate assistance to its customers and support customers’ compliance with applicable notification requirements in the event of a breach.
  • Security incident reporting to the CEO and Board, enhanced employee training, and appropriate resources and support for cybersecurity.
  • Personal information safeguards and controls requiring total database encryption and dark web monitoring.
  • Specific security requirements with respect to network segmentation, patch management, intrusion detection, firewalls, access controls, logging and monitoring, and penetration testing.
  • Third-party assessments of Blackbaud’s compliance with the settlement for 7 years.

Indiana and Vermont co-led the multistate investigation, assisted by the Executive Committee consisting of Alabama, Arizona, Florida, Illinois, and New York, and joined by Alaska, Arkansas, Colorado, Connecticut, Delaware, District of Columbia, Georgia, Hawaii, Idaho, Iowa, Kansas, Kentucky, Louisiana, Maine, Maryland, Massachusetts, Michigan, Minnesota, Mississippi, Missouri, Montana, Nebraska, Nevada, New Hampshire, New Jersey, New Mexico, North Carolina, North Dakota, Ohio, Oklahoma, Oregon, Pennsylvania, Rhode Island, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, Washington, West Virginia, Wisconsin, and Wyoming.

This resolution does not relate to a civil action filed by the State of Wisconsin. The requirements of 2017 Wis. Act 369 do not apply.
Find this press release on the Wisconsin DOJ website here.

Polls

What kind of stories do you want to read more of?

View Results

Loading ... Loading ...

Legal News

See All Legal News

Case Digests

Sea all WLJ People

Opinion Digests