July 2020 Incident

What happened?

On July 16, 2020, Georgetown Day School’s third-party vendor, Blackbaud, informed us that, in May 2020, Blackbaud suffered a ransomware attack which resulted in potential unauthorized access to certain information maintained by Blackbaud. Blackbaud reported the incident to law enforcement and worked with forensic investigators to investigate. Following its investigation, Blackbaud notified its customers, including Georgetown Day School, that an unknown actor may have accessed or acquired certain Blackbaud customer data. 

Upon learning of the Blackbaud incident, Georgetown Day School immediately began to determine what, if any, sensitive data was potentially involved. This investigation included working diligently to gather further information from Blackbaud to understand the scope of the incident. 

When did Georgetown Day School discover that this happened?

On July 16, 2020, Georgetown Day School’s third-party vendor, Blackbaud, informed us that Blackbaud experienced a ransomware attack in May 2020. 

Who is Blackbaud and do they have my personal information? 

Blackbaud is a cloud computing provider that offers customer relationship management and financial services tools for many independent schools, universities, and non-profit organizations. Georgetown Day School uses Blackbaud primarily for these services. 

What information of mine was potentially accessed?

Georgetown Day School uses Blackbaud primarily to assist with donor outreach.  The type of information stored in Blackbaud varies by individual but generally includes names, demographic and contact information, and information related to donor’s relationships with Georgetown Day School.  Please know that while Georgetown Day School does not typically store financial account information in Blackbaud, Blackbaud did confirm that neither bank account nor payment card information was impacted by this incident. 

What is Georgetown Day School doing to prevent this from happening again?

The confidentiality, privacy, and security of information in our care are among our highest priorities, and we take this incident very seriously.  As part of our ongoing commitment to the security of information in our care, we are working to review our existing policies and procedures regarding our third-party vendors, and are working with Blackbaud to evaluate additional measures and safeguards to protect against this type of incident in the future.  

I heard of this event from another source, why is the information provided not the same?

Georgetown Day School is aware that a significant number of independent schools, universities, and non-profit organizations were impacted by this incident, and based on communications from Blackbaud, the type of information potentially impacted varies per organization.