In the Matter of Blackbaud, Inc.
United States Securities and Exchange Commission
Exchange Act Release No. 11165 (2023)
- Written by David Bloom, JD
Facts
Blackbaud, Inc. (defendant) was a public company that provided data-management software for nonprofit organizations. Blackbaud was hit by a cybersecurity attack that exposed certain data about the nonprofit organizations’ donors. Following an initial investigation, Blackbaud’s technicians told Blackbaud’s senior management that the donors’ personal and banking information had not been compromised. Based on the results of the initial investigation, Blackbaud filed a Form 10-Q with the Securities and Exchange Commission (SEC) disclosing that the company had been hit with a cybersecurity attack but that the donors’ personal and banking information was safe. However, unbeknownst to Blackbaud’s senior management, Blackbaud’s technicians discovered that the donors’ personal and banking data had indeed been hacked. The technicians failed to alert senior management about the full extent of the cybersecurity attack before the Form 10-Q was filed. In a subsequently filed Form 8-K, Blackbaud disclosed for the first time that the donors’ personal and banking data was compromised in the cybersecurity attack. The SEC initiated a cease-and-desist proceeding, charging Blackbaud with failing to have adequate internal controls and procedures to ensure that all material information about the cybersecurity attack was disclosed.
Rule of Law
Issue
Holding and Reasoning ()
What to do next…
Here's why 814,000 law students have relied on our case briefs:
- Written by law professors and practitioners, not other law students. 46,300 briefs, keyed to 988 casebooks. Top-notch customer support.
- The right amount of information, includes the facts, issues, rule of law, holding and reasoning, and any concurrences and dissents.
- Access in your classes, works on your mobile and tablet. Massive library of related video lessons and high quality multiple-choice questions.
- Easy to use, uniform format for every case brief. Written in plain English, not in legalese. Our briefs summarize and simplify; they don’t just repeat the court’s language.