Business Context and Reporting Period
Company: Blackbaud, Inc.
Filing Type: Form 8-K (Current Report)
Date of Report: October 5, 2023
Event: Settlement of a multi-state investigation regarding a 2020 cybersecurity incident.
Key Financial Metrics
- Settlement Amount: $49.5 million total payment to 49 states and the District of Columbia.
- Payment Timing: Expected to be paid in full in October 2023.
- Funding Source: Existing liquidity.
- Accounting Treatment: The full amount was accrued as a contingent liability as of June 30, 2023.
- Other Metrics: The filing does not provide current revenue, profit, cash flow, or debt figures.
Material Changes
This filing resolves the previously disclosed multi-state Civil Investigative Demand and the separate demand from the Office of the Indiana Attorney General related to the 2020 Security Incident. The settlement does not represent a new financial charge, as the liability was already accrued in the prior quarter's financial statements.
Guidance, Outlook, and Risks
- Compliance Obligations: The Company agreed to comply with state consumer protection laws, data breach notification laws, and HIPAA. It must also implement improved cybersecurity programs and tools.
- Representations: The Company agreed not to make misleading misrepresentations regarding data privacy, security, and breach notification requirements.
- Liability Admission: The Company entered the agreement without admitting fault or liability.
- Outstanding Risks: The Office of the Attorney General of the State of California did not participate in this settlement. A separate Civil Investigative Demand from California remains unresolved, with no assurance of acceptable resolution terms.
Investor Verification Checklist
- Verify the impact of the $49.5 million payment on current cash balances, noting it was previously accrued.
- Monitor the status of the unresolved investigation by the State of California.
- Review the specific cybersecurity improvements mandated by the Administrative Orders.
- Confirm that no additional penalties or liabilities are expected from the resolved states.