<div class="entry-content"><span>
</span><p><amp-img src="https://grahamcluley.com/wp-content/uploads/2020/08/colossus-730.jpeg" alt="Bletchley Park visitors warned of data breach after Blackbaud ransomware attack" width="730" height="380" class="aligncenter size-full wp-image-6319837 amp-wp-enforced-sizes i-amphtml-layout-intrinsic i-amphtml-layout-size-defined" srcset="https://grahamcluley.com/wp-content/uploads/2020/08/colossus-730.jpeg 730w, https://grahamcluley.com/wp-content/uploads/2020/08/colossus-730-300×156.jpeg 300w" layout="intrinsic" i-amphtml-layout="intrinsic"><i-amphtml-sizer class="i-amphtml-sizer"><img alt="" aria-hidden="true" class="i-amphtml-intrinsic-sizer" role="presentation" src="data:image/svg+xml;base64,PHN2ZyBoZWlnaHQ9JzM4MCcgd2lkdGg9JzczMCcgeG1sbnM9J2h0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnJyB2ZXJzaW9uPScxLjEnLz4="></i-amphtml-sizer><noscript><img loading="lazy" src="https://grahamcluley.com/wp-content/uploads/2020/08/colossus-730.jpeg" alt="Bletchley Park visitors warned of data breach after Blackbaud ransomware attack" width="730" height="380" class="aligncenter size-full wp-image-6319837" srcset="https://grahamcluley.com/wp-content/uploads/2020/08/colossus-730.jpeg 730w, https://grahamcluley.com/wp-content/uploads/2020/08/colossus-730-300×156.jpeg 300w" sizes="(max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 984px) 61vw, (max-width: 1362px) 45vw, 600px"></noscript></amp-img></p><span>
</span><p>Some years ago I visited the fabulous site of Bletchley Park, home of the UK’s then-secret code-breaking efforts during World War II, where Alan Turing and other brilliant minds cracked encrypted messages sent by the Nazis.</p><span>
</span><p>So when I received a letter from Bletchley Park in the post today, I imagined it would invite me to return, containing information about <a href="https://bletchleypark.org.uk/essential-information-for-a-safe-visit-to-bletchley-during-covid-19/reopening-on-saturday-4-july" rel="nofollow noopener noreferrer" title="Link to Bletchley Park">how they’re handling visits during the pandemic</a>.</p><span>
</span><p>Unfortunately, the news wasn’t so good.</p><span>
</span><p><amp-img src="https://grahamcluley.com/wp-content/uploads/2020/08/bletchley-park-letter.jpeg" alt="Bletchley park letter" width="700" height="525" class="aligncenter size-full wp-image-6319836 amp-wp-enforced-sizes i-amphtml-layout-intrinsic i-amphtml-layout-size-defined" srcset="https://grahamcluley.com/wp-content/uploads/2020/08/bletchley-park-letter.jpeg 700w, https://grahamcluley.com/wp-content/uploads/2020/08/bletchley-park-letter-300×225.jpeg 300w" layout="intrinsic" i-amphtml-layout="intrinsic"><i-amphtml-sizer class="i-amphtml-sizer"><img alt="" aria-hidden="true" class="i-amphtml-intrinsic-sizer" role="presentation" src="data:image/svg+xml;base64,PHN2ZyBoZWlnaHQ9JzUyNScgd2lkdGg9JzcwMCcgeG1sbnM9J2h0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnJyB2ZXJzaW9uPScxLjEnLz4="></i-amphtml-sizer><noscript><img loading="lazy" src="https://grahamcluley.com/wp-content/uploads/2020/08/bletchley-park-letter.jpeg" alt="Bletchley park letter" width="700" height="525" class="aligncenter size-full wp-image-6319836" srcset="https://grahamcluley.com/wp-content/uploads/2020/08/bletchley-park-letter.jpeg 700w, https://grahamcluley.com/wp-content/uploads/2020/08/bletchley-park-letter-300×225.jpeg 300w" sizes="(max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 984px) 61vw, (max-width: 1362px) 45vw, 600px"></noscript></amp-img></p><span>
</span><p>Part of the letter reads:</p><span>
</span><blockquote><p>
“We were recently notified by Blackbaud, one of our software supplies, that they have suffered a data brech due to a ransomware attack of their own system. Blackbaud is one the world’s largest providers of customer relationship management services. You may be aware from the news that a significant number of universities and charities here and world-wide have been affected by the issue. Unfortunately, this list includes Bletchley Park Trust.”</p>
<p>“The breach contains some of your personal information, which may include one or more data fields, such as your name, title, date of birth, email address, donation history, mailing or e-newsletter list preference, event attendance or membership, depending on your engagement with the Bletchley Park Trust. However, we would like to stress that Blackbaud has assured us that the issue has been resolved and that the data is secure.”
</p></blockquote><span>
</span><p>The letter goes on to explain that Blackbaud discovered and stopped a ransomware attack against its systems in May, but took until 16 July 2020 to contact Bletchley Park and tell its data had been affected by the breach.</p><span>
</span><p>Blackbaud ultimately decided to pay the cybercriminals who attacked its systems and compromised the data of many organisations.</p><span>
</span><p>As the letter describes, Blackbaud’s cybersecurity team believes that it is now storing data securely, and that it has “no reason to believe that any data went beyond the cybercriminal and that the data was deleted after they paid a ransom.”</p><span>
</span><p>Let’s hope they’re right.</p><span>
</span><p>In the letter the Bletchley Park Trust goes on to apologises”for any inconvience” and says that it is “extremely disappointed” that the security breach occurred.</p><span>
</span><p>Bletchley Park says that it is reviewing how it stores its data, and its future relationship with Blackbaud in light of the security breach.</p><span>
</span><p>Bletchley Park, and the attached National Museum of Computing, make for a terrific day out – and I strongly recommend you spend a day there if you get the chance.</p><span>
</span><p data-amp-original-style="font-size:110%;" class="amp-wp-d1f0990"><em>Found this article interesting? <a href="https://twitter.com/intent/follow?screen_name=gcluley" rel="nofollow noopener noreferrer" title="Link to @gcluley on Twitter">Follow Graham Cluley on Twitter</a> to read more of the exclusive content we post.</em></p><span>
</span><hr><span>
</span><span>
</span><div class="author-info"><span>
</span><!– .author-avatar –><span>
</span><p class="author-bio">
Graham Cluley is a veteran of the anti-virus industry having worked for a number of security companies since the early 1990s when he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows. Now an independent security analyst, he regularly makes <a href="https://grahamcluley.com/about-this-site/media/">media appearances</a> and is an <a href="https://grahamcluley.com/about-this-site/public-speaking/">international public speaker</a> on the topic of computer security, hackers, and online privacy.
Follow him on Twitter at <a href="https://www.twitter.com/gcluley" rel="me">@gcluley</a>, or <a href="https://grahamcluley.com/contact">drop him an email</a>. </p><!– .author-bio –><span>
</span></div><!– .author-info –><span>
</span></div>
