Dear St. Francis Community,

We recently sent letters to former St. Francis Catholic High School families regarding a security breach involving Blackbaud, our third-party provider for business and fundraising software. These letters were sent through a mailing house in Oregon and have created some confusion. 

In July 2020, we were notified  about a ransomware attack that occurred at Blackbaud but we were not identified as being affected at that time. After extensive third-party audits in the fall of 2020, Blackbaud informed us that their conversion data file containing student information may have been compromised.  We conducted an exhaustive search to verify those individuals impacted.

The letter you received includes specific details about the breach that may have involved your personal information on a 2007 Blackbaud backup file; in some cases, bank information may have been accessed; others may have included social security numbers. The letter explains what, if anything, you need to do.

Blackbaud has already implemented several changes that will protect your data from any subsequent incidents. Its teams identified the vulnerability associated with this incident including the tactics used by the cybercriminal and took action to fix it. Blackbaud has tested its fix with multiple third parties, including the appropriate platform vendors, and assured us that it withstands all known attack tactics. They also are accelerating their efforts to further protect data through enhancements to access management, network segmentation, deployment of additional endpoint, and network-based platforms.

While we have no reason to believe the information has been misused or made available publicly, we encourage you to remain vigilant and to report any suspicious activity to law enforcement.  We take the protection and proper use of your personal information very seriously and sincerely apologize for any inconvenience this may cause.

Should you have any additional questions, we encourage you to call 800-578-2389, Monday through Friday from 9:00 a.m to 9:00 p.m. eastern time.

FAQs for Blackbaud Data Incident - Banking Parent Letter
FAQs for Blackbaud Data Incident - SSN