Blackbaud is provider of cloud-based financial, fundraising, and administrative software systems. 

​

The FTC complaint alleged that they engaged in unfair and deceptive because, despite their claims that they used appropriate measures to protect the information they stored on behalf of their customers, they failed to do so, such as by failing to implement password controls, failing to mandate multifactor authentication for employees and customers, and failing to patch outdated software and systems, leading to a hacker using a customer's login credential to access Blackbaud's database and exfiltrate files belonging to BlackBaud's customers that contained information on millions of consumers, including their names, birth dates, addresses, financial and medical information, social security numbers, marital status, employment information, religious beliefs, and educational information.