8/21/20 Update
What happened? Blackbaud, one of the world’s largest software providers to universities, schools, charities, and other nonprofit organizations, provides data management services for the Olympic College Foundation. On August 19, we discovered some of our data held with Blackbaud may have been involved in a security incident. We immediately contacted Blackbaud, who informed us that in May 2020 they discovered — and stopped — a ransomware attack on their computer systems. We investigated the matter to determine what information in our records may have been affected. Blackbaud reports that they paid the ransom demand and believes that copies of the stolen data were destroyed. They also report that they corrected the vulnerability that led to this incident and are making changes to protect our data from further incidents. Based on Blackbaud’s public statements and our direct communications with them, there is no indication your information has been or will be misused.
What information was involved? The Olympic College Foundation does not maintain credit card numbers, bank account information or social security numbers in our Blackbaud database. The information involved in this incident may have included your name, contact information, date of birth, gender, spouse’s name, employment, record of giving to Olympic College Foundation, participation in our events and volunteer activities, and philanthropic interests.
What are we doing? What you can do: Since learning of the incident, we’ve been in continuous communication with Blackbaud to understand the full scope of this matter. Although we have no indication that your information was misused, out of an abundance of caution, you should consider the recommendations below regarding steps you can take to help protect your personal information.
For more information: If you have any further questions or concerns regarding this matter, please don’t hesitate to call Foundation Executive Director Trevor Ross directly at (360) 475-7121, from 8 a.m. to 5 p.m. Pacific Time, Monday through Friday (excluding major U.S. holidays).
Please know that we deeply regret any worry or inconvenience this may cause you. Thank you very much for your involvement in and support of the Olympic College Foundation.
Tips for Safeguarding Your Data
Review Account Statements and Notify Law Enforcement of Suspicious Activity: As a precautionary measure, we recommend that you remain vigilant and review your account statements and credit reports closely. If you detect any suspicious activity on an account, you should promptly notify the financial institution or company with which the account is maintained. You should also promptly report any fraudulent activity or any suspected incidence of identity theft to proper law enforcement authorities, your state attorney general, and/or the Federal Trade Commission.
Credit Report Copy: You may obtain a free copy of your credit report from each of the three major credit reporting agencies once every 12 months by visiting http://www.annualcreditreport.com/, calling toll-free 877-322-8228, or by completing an Annual Credit Report Request Form and mailing it to Annual Credit Report Request Service, P.O. Box 105281
Equifax
P.O. Box 105851 Atlanta,
GA 30348 1-800-525-6285
Experian
P.O. Box 9532
Allen, TX 75013 1-888-397-3742
TransUnion
P.O. Box 1000 Chester,
PA 19016 1-877-322-8228
Fraud Alert:You may want to consider placing a fraud alert on your credit file. An initial fraud alert is free and will stay on your credit file for at least one year. The alert informs creditors of possible fraudulent activity within your report and requests that the creditor contact you prior to establishing any accounts in your name. To place a fraud alert on your credit report, contact any of the three credit reporting agencies identified above. Additional information is available at http://www.annualcreditreport.com.
Security Freeze: In some U.S. states, you have the right to put a security freeze on your credit file. This will prevent new credit from being opened in your name without the use of a PIN number that is issued to you when you initiate the freeze. A security freeze is designed to prevent potential creditors from accessing your credit report without your consent. As a result, using a security freeze may interfere with or delay your ability to obtain credit. You must separately place a security freeze on your credit file with each credit reporting agency. There is no fee to place, lift or remove the security freeze. In order to place a security freeze, you may be required to provide the consumer reporting agency with information that identifies you including your full name, Social Security number, date of birth, current and previous addresses, a copy of your state-issued identification card, and a recent utility bill, bank statement or insurance statement. Details at: https://www.atg.wa.gov/security-freeze-procedures.
Additional Free Resources:You can obtain information from the consumer reporting agencies, the FTC or from your state Attorney General about steps you can take toward preventing identity theft. You may report suspected identity theft to local law enforcement, including to the FTC or to the Attorney General in your state of residence.
Federal Trade Commission: 600 Pennsylvania Ave, NW, Washington, DC 20580, consumer.ftc.gov, and www.ftc.gov/idtheft, 1-877-438-4338
Your Rights under the Fair Credit Reporting Act (FCRA):These rights include knowing what is in your file; disputing incomplete or inaccurate information; and requiring consumer reporting agencies to correct or delete inaccurate, incomplete, or unverifiable information. For more information about the FCRA, please visit A Summary of Your Rights Under the Fair Credit Reporting Act (ftc.gov).
