FTC Order Will Require Blackbaud to Delete Unnecessary Data, Boost Safeguards to Settle Charges its Lax Security Practices Led to Data Breach

Here is a summary of the provided document:

Summary:

The Federal Trade Commission (FTC) has filed a complaint against South Carolina-based Blackbaud Inc., a company that provides data services and software to organizations, for failing to implement adequate security measures to protect sensitive consumer data. The FTC alleges that Blackbaud's lax security allowed a hacker to breach its network and steal sensitive data, including Social Security and bank account numbers, without detection for three months. The company failed to encrypt sensitive data, implement firewalls, and delete data no longer needed. As a result, the FTC is requiring Blackbaud to delete personal data it no longer needs, implement a comprehensive information security program, and put in place a data retention schedule. Blackbaud has also agreed to pay a ransom of 24 Bitcoin and notify customers about the breach and the scope of the stolen data.