The Wisconsin Evangelical Lutheran Synod (WELS) experienced a ransomware attack in May 2020, disclosed on September 29, 2020, involving the third-party vendor Blackbaud. The breach exposed highly sensitive personal data, including names, dates of birth, financial account numbers, and Social Security Numbers (SSNs) of an undisclosed number of individuals. The attack targeted Blackbaud’s systems, which stored WELS’s donor and constituent records, leading to potential identity theft, financial fraud, or misuse of personal information. While the exact scale of the breach remains unknown, the compromised data’s nature—particularly SSNs and financial details—poses severe long-term risks for affected individuals. Blackbaud reportedly paid the ransom, but the incident underscores vulnerabilities in third-party data handling and the escalating threat of ransomware targeting organizations with sensitive personal records.

On May 20, 2020, the Wisconsin Evangelical Lutheran Synod fell victim to a ransomware attack, compromising the personal data of 867 individuals, including 89 Washington residents. The breach exposed highly sensitive information such as names, dates of birth, financial account numbers, and Social Security Numbers (SSNs). This incident posed severe risks, including identity theft, financial fraud, and long-term reputational harm to the affected individuals. The attack targeted critical personal and financial data, indicating a deliberate effort to exploit confidential records for malicious purposes. The organization was required to notify regulatory authorities, including the Washington State Office of the Attorney General, highlighting the severity of the breach and its potential legal and compliance repercussions. The incident underscored vulnerabilities in the Synod’s cybersecurity defenses, raising concerns about data protection practices within religious and non-profit institutions.