3 unchanged sentences
Operational Risks
−Removed: The COVID-19 pandemic (“COVID-19”) has disrupted, and is expected to continue to disrupt, our business, which is likely to adversely affect our operations and financial performance.
−Removed: The outbreak of COVID-19 in numerous countries across the globe, including each country in which we currently operate, has adversely impacted the U.S.
−Removed: and global economies.
−Removed: We have experienced disruptions to our business thus far from COVID-19, and the pandemic continues to impact each of our markets.
−Removed: Governmental authorities have taken, and continue to take, countermeasures to slow the outbreak, including shelter-in-place and business closure orders and large-scale restrictions on travel.
−Removed: Furthermore, because the pandemic is a rapidly evolving situation, we cannot anticipate with certainty the length, scope or severity of such restrictions in the jurisdictions in which we operate.
−Removed: Certain vertical markets we serve are especially vulnerable to the ongoing global business disruption.
−Removed: • Many arts and cultural organizations, including museums, zoos, performing arts centers and theaters, among others, have had to cancel events or have seen a significant decline in attendance due to COVID-19.
−Removed: Many of these organizations have also suspended their operations temporarily.
−Removed: • We believe that a number of K-12 private schools, that would have ordinarily considered purchasing our cloud solutions for the 2020-2021 academic school year, have delayed their expenditure decisions due to the uncertainty of COVID-19.
−Removed: • A number of our nonprofit customers have also been negatively impacted by the postponement or cancellation of mass-participation events, such as marathons and other endurance sporting events, galas, auctions and other fundraisers.
−Removed: We believe that COVID-19 has impacted and will continue to impact all of our vertical markets across all of our geographies to some degree, but the significance and duration of the impact on our business cannot be determined at this time due to numerous uncertainties, including the ultimate geographic spread of the disease, the duration of the outbreak, travel restrictions and business closures, the effectiveness of actions taken to contain the disease and other unforeseeable consequences.
−Removed: This impact could include:
−Removed: • changes in customer demand;
−Removed: • our relationship with, and the financial and operational capacities of, our service providers, suppliers and business partners, including their ability to fulfill their obligations to us;
−Removed: • further declines in our customers' ability to pay for our solutions and services;
−Removed: • reduced workforce availability and productivity due to working remotely using different technologies and potential health effects and concerns;
−Removed: • risks associated with our indebtedness (including available borrowing capacity, compliance with financial
−Removed: Third Quarter 2020 Form 10-Q
−Removed: Blackbaud, Inc.
−Removed: covenants and ability to refinance or repay indebtedness on favorable terms);
−Removed: • the adequacy of our cash flows and earnings and other conditions that may affect our liquidity;
−Removed: • disruptions to our technology network and other critical systems;
−Removed: • impairment charges against our goodwill and other intangible assets, operating lease right-of-use assets and other long-lived assets.
−Removed: We believe that business disruption relating to the COVID-19 pandemic will continue to negatively impact the U.S.
−Removed: and global economies and may materially adversely impact our business, financial condition and results of operations.
−Removed: If the security of our software is breached, we fail to securely collect, store and transmit customer information, or we fail to safeguard confidential donor data, we could be exposed to liability, litigation, penalties and remedial costs and our reputation and business could suffer.
−Removed: Fundamental to the use of our solutions is the secure collection, storage and transmission of confidential donor and end user data and transaction data, including in our payment services.
−Removed: Despite the network, application and physical security procedures and internal control measures we employ to safeguard our systems, we may still be vulnerable to a security breach, intrusion, loss or theft of confidential donor data and transaction data, which may harm our business, reputation and future financial results.
−Removed: Furthermore, our increased reliance on remote access to information systems and global disruptions in response to COVID-19, as described above, increase our exposure to potential cybersecurity incidents.
−Removed: Like many major businesses, we are, from time to time, a target of cyberattacks, phishing and social engineering schemes, such as the Security Incident (as described in Note 10 of the unaudited condensed consolidated financial statements in this report), and we expect these threats to continue, some of which may be successful to varying degrees.
−Removed: Because the numerous and evolving cybersecurity threats used to obtain unauthorized access, disable, degrade or sabotage systems have become increasingly more complex and sophisticated, it may be difficult to anticipate these acts or to detect them for periods of time, as with the Security Incident, and we may be unable to respond adequately or timely.
−Removed: As these threats continue to evolve and increase, we may be required to devote significant additional resources in order to modify and enhance our security controls and to identify and remediate any security vulnerabilities.
−Removed: A compromise of our data security that results in customer or customer constituent personal or payment card data being obtained by unauthorized persons could adversely affect our reputation with our customers and others, as well as our operations, results of operations, financial condition and liquidity and could result in litigation against us or the imposition of fines and penalties.
−Removed: We might be required to expend significant additional capital and other resources to rectify problems caused by a security breach, including notification under data privacy laws and regulations, and incur expenses related to remediating our information security systems.
−Removed: Even though we carry cyber-technology insurance policies that may provide insurance coverage under certain circumstances, we might suffer losses as a result of a security breach that exceed the coverage available under our insurance policies or for which we do not have coverage.
−Removed: A security breach and any efforts we make to address such breach could also result in a disruption of our operations, particularly our online sales operations.
−Removed: The occurrence of actual cyber security events, such as the Security Incident, could magnify the severity of the adverse effects of future incidents on our business.
−Removed: The techniques used to obtain unauthorized access, disable or degrade service, or sabotage information systems can be difficult to detect for long periods of time and can involve difficult or prolonged assessment or remediation periods even once detected.
−Removed: We, therefore, cannot assure you that all potential causes of past significant incidents, including the Security Incident, have been fully identified and remediated.
−Removed: The steps we take may not be sufficient to prevent future significant incidents and, as a result, such incidents may occur again.
The Security Incident could have numerous adverse effects on our business.
1 unchanged sentence
Prior to our successfully preventing the cybercriminal from blocking our system access and fully encrypting files, and ultimately expelling them from our system with no significant disruption to our operations, the cybercriminal removed a copy of a subset of data from our self-hosted environment.
−Removed: Although the nature of the incident, our research and third party (including law enforcement)
−Removed: Third Quarter 2020 Form 10-Q
−Removed: Blackbaud, Inc.
−Removed: investigation have provided no reason to believe that any data went beyond the cybercriminal, was or will be misused, or will be disseminated or otherwise made available publicly, our investigation into the Security Incident remains ongoing and may provide additional information.
−Removed: To date, we have received approximately 160 claims from customers or their attorneys related to the Security Incident and are in the process of assessing what, if any, liability may exist pursuant to such claims.
+Added: Although the nature of the incident, our research and third party (including law enforcement) investigation have provided no reason to believe that any data went beyond the cybercriminal, was or will be misused, or will be disseminated or otherwise made available publicly, our investigation into the Security Incident remains ongoing and may provide additional information.
+Added: To date, we have received approximately 630 claims for reimbursement of expenses from customers or their attorneys related to the Security Incident (none of which have as yet been filed in court or in arbitration) and are in the process of assessing what liability may exist pursuant to such claims.
Possible exposure could result from our customers’ costs and expenses associated with notifying their own constituents of the Security Incident and taking steps to assure that personal information has not been compromised as a result of the Security Incident.
−Removed: In addition, to date, we have been named as a defendant in 23 putative consumer class action cases (17 in U.S.
−Removed: federal courts, 4 in U.S.
−Removed: state courts and 2 in Canadian courts) alleging harm from the Security Incident.
+Added: In addition, presently, we are a defendant in 30 putative consumer class action cases [ 27 in U.S.
+Added: federal courts (some of which have been consolidated under multi district litigation to a single federal court), 1 in a U.S.
+Added: state court and 2 in Canadian courts] alleging harm from the Security Incident.
The plaintiffs in these cases, who generally purport to represent various classes of individual constituents of our customers, generally claim to have been harmed by alleged actions and/or omissions by us in connection with the Security Incident and assert a variety of common law and statutory claims seeking monetary damages, injunctive relief, costs and attorneys’ fees, and other related relief.
−Removed: To date, we also have received a consolidated, multi-state Civil Investigative Demand issued on behalf of 43 state Attorneys General and the District of Columbia relating to the Security Incident.
+Added: To date, we also have received a consolidated, multi-state Civil Investigative Demand issued on behalf of 47 state Attorneys General and the District of Columbia and a separate Civil Investigative Demand from the office of the Illinois Attorney General’s Office relating to the Security Incident.
In addition, we have received communications, inquires and requests from the U.S.
Federal Trade Commission, the U.S.
−Removed: Department of Health and Human Services, the Information Commissioner’s Office in the United Kingdom (the “ICO”) under the U.K.
+Added: Department of Health and Human Services, the U.S.
+Added: Securities and Exchange Commission, the Information Commissioner’s Office in the United Kingdom (the “ICO”) under the U.K.
Data Protection Act 2018, the Office of the Australian Information Commissioner and the Office of the Privacy Commissioner of Canada.
−Removed: (See Note 10 to the unaudited, condensed consolidated financial statements included in this report.)
+Added: (See Note 9 to our unaudited, condensed consolidated financial statements included in this report for a more detailed description of the Security Incident and related matters)
We may be named as a party in additional lawsuits, other claims may be asserted by or on behalf of our customers or their constituents, and we may be subject to additional governmental inquires, requests or investigations.
2 unchanged sentences
Although we intend to defend ourselves vigorously against the claims asserted against us, we cannot predict the potential outcomes, cost and expenses associated with current and any future claims, lawsuits, inquiries and investigations.
+Added: First Quarter 2021 Form 10-Q
+Added: Blackbaud, Inc.
Significant management time and Company resources have been, and are expected to continue to be, devoted to the Security Incident.
−Removed: (See Note 10 to the unaudited, condensed consolidated financial statements included in this report.) Although we carry cyber-technology insurance designed to protect us against certain losses related to cybersecurity events, that insurance coverage may not be sufficient to cover all expenses or other losses (including fines) or all types of claims that may arise in connection with cyberattacks, security compromises and other related incidents.
+Added: (See Note 9 to our unaudited, condensed consolidated financial statements included in this report.) Although we carry insurance designed to protect us against certain losses related to cybersecurity events, that insurance coverage may not be sufficient to cover all expenses or other losses (including fines) or all types of claims that may arise in connection with cyberattacks, security compromises and other related incidents.
Furthermore, in the future such insurance may not be available on commercially reasonable terms, or at all.
Future publicity or developments related to the Security Incident could have a range of other adverse effects on our business or prospects, including causing or contributing to loss of customer confidence, reduced customer demand, reduced customer retention, strategic growth opportunities, and associated retention and recruiting difficulties.
−Removed: Third Quarter 2020 Form 10-Q
−Removed: Blackbaud, Inc.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.