Montana · verified official-source register

Montana Privacy Enforcement Cases

1 approved, official-source case record from the 50-state register. Dates, amounts, legal context and disposition qualifications are supported by the cited evidence.

1 primary case-source link · 1 unique primary source URL

Last editorial review (targeted corrections): · Last link check (automated availability check):

Actual case links

Montana case register

Each record cites an official Attorney General or state-agency source. Shared multistate amounts should not be summed as unique state penalties. Additional verification sources are identified when an amount has been reconciled.

Verified case 1 of 1

Blackbaud

Date
not stated in the official release
Amount
$49.5 million total; Montana’s share: $388,649
Legal basis
state consumer protection laws, breach notification laws, and HIPAA

Why the action was brought

Blackbaud’s deficient security allowed unauthorized access to its network in a 2020 breach exposing highly sensitive constituent data—including contact and demographic information, Social Security and driver’s license numbers, financial, employment, wealth, donation, and health information—affecting 26 Montana organizations. It allegedly failed to remediate known gaps and provide timely, complete, accurate notice, delaying or preventing consumer notification.

View Official Case Source ↗ (opens in a new tab)

This register contains approved, official-source privacy, data-breach and data-security enforcement records. Read any case-specific court-approval qualification; inclusion does not confirm payment or final judgment. Shared multistate amounts should not be summed as unique state penalties.

Educational information, not legal advice.

Back to MontanaAll states

Original case-library snapshot: August 23, 2026. Original state-law research cutoff: August 25, 2026. Monetary-library update: September 16, 2026, not a new full 50-state research cutoff. Targeted Indiana and New Hampshire law review: October 19, 2026 only. Source inclusion does not independently confirm final court entry or payment.