Recently, two non-profit organizations filed data breach notices after discovering that a software vendor, DonorPerfect, experienced a data breach. The two non-profits were Good Counsel and the YSU Foundation. In this notice, the respective non-profits explain that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names and financial account information. Upon completing their investigations, Good Counsel and YSU Foundation began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from DonorPerfect, Good Counsel or YSU Foundation, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the DonorPerfect data breach. For more information, please see our recent piece on the topic here.

What Caused the DonorPerfect Data Breach?

The DonorPerfect data breach was only recently announced, and more information is expected in the near future. However, Good Counsel’s filing with the Attorney General of Vermont provides some important information on what led up to the breach. According to this source, on December 5, 2023, Good Counsel learned that an image of a donor’s check had appeared without authorization online. In response, Good Counsel reached out to DonorPerfect, which is the company that administers Good Counsel’s donations. Good Counsel also conducted an investigation of its own IT network to ensure an unauthorized party hadn’t obtained access.

Good Counsel’s investigation confirmed that its own IT network was not the source of the breach. Thus, Good Counsel determined that the issue was related to DonorPerfect. Good Counsel is working with DonorPerfect to determine what occurred, but, in the meantime, Good Counsel confirmed that certain information belonging to donors was exposed through the DonorPerfect breach.

After learning that sensitive consumer data was accessible to an unauthorized party, Good Counsel reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your name and financial account information.

On February 15, 2024, Good Counsel sent out data breach letters to anyone who was affected by the recent data security incident. It is unclear if the YSU Foundation has also sent letters, although it is likely that the Foundation will at some point. These letters should provide victims with a list of what information belonging to them was compromised.

More Information About DonorPerfect

DonorPerfect is a non-profit fundraising software created by Softerware, Inc. The software assists non-profit administration with donor management, grant & gift tracking, moves management, mass mailing and other related services. DonorPerfect’s creator, Softerware, employs more than 220 people and generates approximately $73 million in annual revenue.