Blackbaud, Inc.

Blackbaud is a risk and accountability case because its 2020 ransomware incident tested whether a cloud provider for charities, universities, healthcare organizations, cultural institutions, faith groups, and foundations could control not only technical recovery but also evidence about whose constituent data had been copied, when customers were told, what was still unknown, and which people outside the vendor relationship carried the risk. The case matters because donors, patients, students, alumni, beneficiaries, supporters, and nonprofit staff did not choose Blackbaud directly, yet their identities, giving histories, health-adjacent relationships, and financial fields depended on Blackbaud's custody, retention, investigation, and notification discipline.