A hack targeted at Blackbaud – a company providing educational support services – has compromised data belonging to universities and institution around the world.
Under various laws this was a notifiable incident – the UK law states that the ICO must be informed within 72 hours – however Blackbaud took weeks to report the incident to the ICO following day the discovery.
Read more about this story at the BBC – Blackbaud Hack: Universities lose data to ransomware attack – BBC News
Privacy and transparency should be at the heart of all responsible businesses.