CRI Statement on Blackbaud Data Breach

The Cancer Research Institute (CRI) was informed on July 16, 2020, that one of our vendors, Blackbaud, experienced a data incident in May of this year. Blackbaud is a cloud service used by many nonprofit institutions to manage various aspects of their operations. CRI recognizes that our constituents, including donors, scientists, and others, may have read about this incident in the press and wishes to clarify the impact on our organization and our donors.

The Cancer Research Institute does not store credit card or other financial information, and no such information was accessed in this incident. CRI did not experience any business continuity issues as a result of this incident. However, a subset of the data that CRI maintains on Blackbaud was accessed before Blackbaud was able to stop the attack. CRI understands from Blackbaud that this included accounting data and certain information kept in our records, such as donor names, addresses, email addresses, and donation amounts. Blackbaud has informed CRI that they have reviewed the web and that the accessed information has not been published or shared. CRI remains in communication with Blackbaud, who continues to work with forensic experts to monitor the situation.

Additional information:

• Blackbaud Statement on Security Incident
• Cancer Research Institute Privacy Policy

Please send any inquiries regarding this data incident to Alfred R. Massidas or Rupinder Kaur at:

Email: [email protected]
Phone: +1-800-992-2623 or +1-212-688-7515
Mail: Cancer Research Institute, Data Privacy, 29 Broadway, Floor 4, New York, NY 10006-3111

CRI appreciates the support of our community in fulfilling our mission to save more lives by fueling the discovery and development of powerful immunotherapies for all types of cancer. CRI will keep our stakeholders informed of any further information about this incident that may be important.