South Carolina-based Blackbaud suffered a data exfiltration and ransomware attack in May. Ransomware is becoming part of the mix, owing to gangs first exfiltrating data and then threatening to leak it if victims don’t pay a ransom. The company says it paid a ransom to secure a promise from attackers that they would delete stolen data. The lawsuit seeks, in part, seven years of prepaid identity theft monitoring for victims. It alleges that attackers may have compromised massive quantities of PII, including Social Security, credit card numbers.”]
Source: https://www.careersinfosecurity.com/class-action-lawsuit-questions-blackbauds-hacker-payoff-a-14922