At Encompass, we deeply value our relationship with you as together we seek to make disciples among the least reached. That relationship is why we are sharing this information.
We have recently been informed by one of our information technology services that it experienced a data system breach. This service is not involved in Encompass’s online or electronic giving and does not contain any giving account or credit card information. That service has assured us that no financial information in our accounting system was in peril and that no misuse of data should affect Encompass or any of our constituents. Out of a desire for transparency, we decided to share this information with you.
What happened?
We use Blackbaud software and data hosting services to manage our constituent and accounting data. On July 16, Blackbaud notified us that its data hosting site had experienced a cybercriminal attack in May. Blackbaud’s security team was able to quickly identify and stop the attack. However, a portion of the data it hosts was exposed to a ransomware lockout. That portion included a backup copy of our constituent and internal accounting data. Blackbaud determined that no credit card information, bank account information, personal password or PIN information, or Social Security information was involved.
In Blackbaud’s software, all personal financial information and all Social Security information is encrypted, and thus, as we have been informed, it is inaccessible by outsiders, including the recent criminal hackers. The data that was exposed is contact information, history of a constituent’s interaction with Encompass, and internal accounting data. After work by Blackbaud Security, third-party data security experts, and law enforcement, Blackbaud concluded that there is no reason to believe any information could be used against Encompass or to harm any of our constituents. Blackbaud’s team took the time to do a thorough investigation, and we’ve now done the same. Our internal review similarly revealed no signs that any outsider had gained access to personal financial information.
Did this impact electronic giving?
This incident affected only our constituent and internal accounting system. Our online and electronic giving systems are with a separate organization that does not use the Blackbaud systems that were attacked. So, we know of no reason to be concerned if you gave electronically or intend to do so. Our online giving portal continues to be secure.
Do I need to do anything?
We know of no reason to believe that you need to do anything. The data systems involved are used internally by Encompass and have no links to your personal accounts. Blackbaud is confident that its actions have secured the affected data and that there is no reason to believe that anything can be used against you.
What if I have questions?
If you have questions, please email Lindsay Schuiteman or call 768-992-5313.
Thank you for your partnership in the gospel. We are grateful that even in a cyberattack like this, God protected us from an outcome that could have been much worse. We look forward to continuing to work with you to take the name of Christ where it is needed most.
Together for the nations,
Encompass World Partners
