Blackbaud has agreed to pay $3 million to settle charges that it made misleading disclosures about a 2020 ransomware infection in which crooks stole more than a million files on around 13,000 of the cloud software slinger's customers. This, in turn, resulted in the company filing a quarterly SEC report that omitted this material information about the scope of the cyberattack, and according to the agency, "misleadingly characterized the risk of an attacker obtaining such sensitive donor information as hypothetical. "PDF] about the ransomware infection, and admitted for the first time that criminals "may have accessed some unencrypted" customer banking information