In a significant event last week, 49 state attorneys general announced a $49.5 million settlement with Blackbaud, Inc. over allegations pertaining to the software company’s data-security practices. The case notably focused on Blackbaud’s response to a breach in 2020 that exposed the personal information of millions of individuals. The settlement consists of one of the larger amounts seen in such multi-state data breach related agreements and sends a strong message to organizations about the importance of proper data security practices.
The announcement emanated from the office of Dinsmore & Shohl LLP, which has stressed the need for companies to handle data responsibly while noting the potential consequences of failing to do so.
This recent case serves to underscore the pressing importance of increasingly stringent compliance standards in data security. The high-profile settlement received wide coverage across the legal news ecosystem, shedding further light on the centrality of data security and breach response measures in contemporary legal discourses surrounding the broader technology and software industry.
While details surrounding the nature of Blackbaud’s original data breach and subsequent response have so far featured prominently in the legal press, questions linger over how the settlement sum was reached. The methods used to calculate such a substantial figure remain points of interest among legal professionals, particularly those specializing in data security and corporate responsibility.
Overall, the Blackbaud settlement illustrates the ever-increasing costs—both financial and reputational—of data breaches. It also provides a stark reminder of the potential legal pitfalls that can ensue from inadequate data security practices within the software industry and further afield.
For more on this issue, you may want to check the full details of the Blackbaud case, as covered by JD Supra
.