Missouri · verified official-source register

Missouri Privacy Enforcement Cases

1 approved, official-source case record from the 50-state register. Dates, amounts, legal context and disposition qualifications are supported by the cited evidence.

1 primary case-source link · 1 unique primary source URL

Last editorial review (targeted corrections): · Last link check (automated availability check):

Actual case links

Missouri case register

Each record cites an official Attorney General or state-agency source. Shared multistate amounts should not be summed as unique state penalties. Additional verification sources are identified when an amount has been reconciled.

Verified case 1 of 1

Blackbaud, Inc.

Date
2023-11-06
Amount
$49,500,000 total to the Attorneys General; $818,266.00 to Missouri; injunctive relief
Legal basis
Missouri Revised Statutes §§ 407.010, et seq.; Missouri Revised Statutes § 407.1500; Health Insurance Portability and Accountability Act of 1996, Pub. L. No. 104-191, 110 Stat. 1936, as amended by the Health Information Technology for Economic and Clinical Health Act, Pub. L. No. 111-5, 123 Stat. 226; 42 U.S.C. § 1320d-5(d); 45 C.F.R. Part 160 and Part 164, Subparts A, C, and E; 45 C.F.R. §§ 160.103, 164.304, 164.308, 164.310, 164.312, 164.502(b), and 164.514(d)

Why the action was brought

Blackbaud software managed donor identifying information, donation history, and financial information. On May 14, 2020, a ransomware attack resulted in unauthorized access to and exfiltration of sensitive donor information. The breach affected over one million files related to over 13,000 customers, impacting donors, including Missouri residents. The document does not specify a particular violation.

View Official Case Source ↗ (opens in a new tab)

This register contains approved, official-source privacy, data-breach and data-security enforcement records. Read any case-specific court-approval qualification; inclusion does not confirm payment or final judgment. Shared multistate amounts should not be summed as unique state penalties.

Original case-library snapshot: August 23, 2026. Original state-law research cutoff: August 25, 2026. Monetary-library update: September 16, 2026, not a new full 50-state research cutoff. Targeted Indiana and New Hampshire law review: October 19, 2026 only. Source inclusion does not independently confirm final court entry or payment.