Dear Friend of Phillips Brooks School,
We are writing to let you know that Phillips Brooks School was notified in July of a data security incident at Blackbaud, a third-party vendor whose fundraising, general ledger, and donor engagement software is used by educational institutions and nonprofit organizations worldwide. Please know that we take the protection and use of your personal information very seriously. Because of that, we are contacting you as a precautionary measure to share what we know about the incident.
Blackbaud was the subject of a ransomware attack in the February-May 2020 timeframe, and the cyber-criminal may have had access to specific personal information of numerous Blackbaud clients, including Phillips Brooks School. Blackbaud paid the requested ransom and their system was restored. Through their forensic analysis, including assistance from the FBI, Blackbaud reports that any removed data has been destroyed and their monitoring since the incident does not indicate any unauthorized usage of the data. Blackbaud has already taken steps to enhance their system security and implemented changes to protect your data.
The Blackbaud data security incident may have included demographic data for Phillips Brooks School community members, including names, addresses, dates of birth, and information pertaining to your relationship with Phillips Brooks School, including philanthropic giving history. Please be assured that there was no exposure of any sensitive identification numbers or financial account information.
Phillips Brooks School takes the protection and proper use of your information very seriously. Although there was no exposure of your sensitive information, we are contacting you as a precautionary measure to promote open disclosure and remind you to be diligent with protecting your personal information. As a best practice, we recommend you remain vigilant and promptly report to the proper law enforcement authorities any suspicious activity or suspected identity theft.
We deeply value your connection to Phillips Brooks School, and we sincerely apologize for this incident and regret any inconvenience it may cause you. Should you have any further questions or concerns regarding this matter, please do not hesitate to contact us at email@example.com. This email address will be operational for sixty days from now and we will respond to all inquiries.
Normington (he/him ℹ️)
Chief Financial Officer