---
schema_version: "secwatch.filing_event.v1"
accession: "0001280058-23-000010"
form_type: "8-K"
ticker: "BLKB"
cik: "0001280058"
company_name: "BLACKBAUD INC"
filed_at: "2023-03-09T23:59:59+00:00"
generated_at: "2026-06-18T06:29:58.207540+00:00"
event_type: "regulatory"
sentiment: "negative"
materiality_score: 0.75
calibrated_materiality_score: 0.75
confidence: "high"
source: SEC EDGAR
---

# Blackbaud settles SEC charges for $3M over misleading 2020 ransomware disclosure

## Summary
- SEC order requires Blackbaud to cease-and-desist and pay $3M civil penalty for misleading statements about scope of 2020 data breach.
- Attack exfiltrated 1M+ files from 13,000+ customers, including unencrypted bank account numbers and SSNs.
- Blackbaud's Aug 2020 10-Q omitted that sensitive donor data was accessed, misleading investors.
- Company lacked disclosure controls for cybersecurity incidents, violating Exchange Act Rule 13a-15(a).
- Settlement resolves SEC investigation; Blackbaud neither admits nor denies findings.

## SEC filing metadata
- accession: 0001280058-23-000010
- form_type: 8-K
- ticker: BLKB
- cik: 0001280058
- company_name: BLACKBAUD INC
- filed_at: 2023-03-09T23:59:59+00:00
- event_type: regulatory
- sentiment: negative
- materiality_score: 0.75
- calibrated_materiality_score: 0.75
- confidence: high
- sec_items: 7.01, 9.01
- EDGAR index: https://www.sec.gov/Archives/edgar/data/1280058/000128005823000010/0001280058-23-000010-index.htm
- EDGAR primary document: https://www.sec.gov/Archives/edgar/data/1280058/000128005823000010/blkb-20230309.htm

## Machine-readable alternates
- HTML: https://secwatch.observer/filing/0001280058-23-000010
- JSON: https://secwatch.observer/filing/0001280058-23-000010.json
- Plain text: https://secwatch.observer/filing/0001280058-23-000010.txt

This AI-assisted summary is a reading aid. Review the linked SEC EDGAR filing before relying on any specific claim.