BLACKBAUD DATA NOTIFICATION: UPDATED AUGUST 31, 2020

Fort Collins Museum of Discovery (FCMoD) was notified on July 16, 2020 by one of our vendors, Blackbaud Inc., of a security incident. The museum uses Blackbaud as its primary database for donations, memberships, ticketed events, and admission. The following information is based on communication shared by Blackbaud with FCMoD, from FCMoD's independent research into the incident, and based on the City of Fort Collins' expert panel review of the incident. 

We value your patronage of FCMoD. As a nonprofit museum, we want you to feel at ease buying tickets, purchasing and renewing memberships, donating, and interacting with us online. We are committed to protecting online users' privacy and, in full transparency, wanted to make you aware of what we know. The purpose of this notice and the following Privacy Policy is our commitment to you in your online interactions with us and our vendors. 

What Happened: 

Blackbaud, which works with many organizations across the globe, discovered and halted an attack on their systems. Prior to successfully stopping the attack, the cybercriminals removed a copy of FCMoD’s customer data. No credit card, bank account, or social security numbers, usernames, or passwords were compromised. Blackbaud has taken steps to ensure that the stolen data has been destroyed. There is no expectation that FCMoD customer information is at risk of malicious use. 

What Information Was Involved: 

It’s important to note that the cybercriminal did not access customer credit card information, bank account information, social security number, username, or password. However, we have determined that the file removed may have contained your contact information and history of your relationship with us. The museum does not save sensitive data, such as credit card and bank account information or social security numbers, within Blackbaud. 

Based on the nature of the incident, Blackbaud’s research, and third party (including law enforcement) investigation, we have no reason to believe that any data went beyond the cybercriminal, was or will be misused, or will be disseminated or otherwise made available publicly. 

What We Are Doing: 

We are notifying you so that you can take immediate action to protect yourself. Ensuring the safety of our constituents’ data is of the utmost importance to us. As part of their ongoing efforts to help prevent something like this from happening in the future, Blackbaud has already implemented several changes that will protect your data from any subsequent incidents. 

First, Blackbaud’s teams were able to quickly identify the vulnerability associated with this incident, including the tactics used by the cybercriminal, and took swift action to fix it. They have confirmed through testing by multiple third parties, including the appropriate platform vendors, that their fix withstands all known attack tactics. Additionally, they are accelerating their efforts to further harden their environment through enhancements to access management, network segmentation, deployment of additional endpoint and network-based platforms. 

What You Can Do: 

As a best practice, we recommend you remain vigilant and promptly report any suspicious activity or suspected identity theft to us and to your local law enforcement authorities. The Federal Trade Commission provides guidance on how to keep your personal information secure. 

For More Information: 

We sincerely apologize for this incident and regret any inconvenience it may cause you. Please visit this webpage to read Blackbaud’s statement. Should you have any further questions or concerns regarding this matter, please do not hesitate to contact the City of Fort Collins Privacy and Records Manager at (970)221-6515 or cityclerk@fcgov.com.

 

Privacy Policy

The Fort Collins Museum of Discovery is committed to protecting online users’ privacy. The purpose of our policy is to inform you about the types of information we gather when you visit our site, how we may use that information, and whether we disclose it to anyone.

Donor Privacy Statement

We will not sell, share or trade our donors' names or personal information with any other entity, nor send mailings to our donors on behalf of other organizations.This policy applies to all information received by FCMoD, both online and offline, on any Platform ("Platform", includes the FCMoD website and mobile applications), as well as any electronic, written, or oral communications.To the extent any donations are processed through a third-party service provider, our donors’ information will only be used for purposes necessary to process the donation.

Information Collected For Statistical Purposes

We automatically collect electronically generated information about your visit to our site, such as the date, type of browser used, and technical Internet protocol data. We collect this information about each user session from our user logs, and refer to it in summary form for identifying trends. Our goal in using this type of information is to help us make our site more useful to visitors, to learn about the number of visitors and the types of technology our visitors use. We do not track or record information about individuals and their visits.

How We Collect and Use Personal Information

If you submit a question or comment that contains personally identifying information, we will only use the personally identifiable information to respond to your request and analyze trends.
If you subscribe to any of our online subscriptions, your email address is used only to deliver the subscription you opted into. We do not compile information on subscriptions, historical or otherwise, and you have the option to stop future mailings at any time.

Control of Personal Information

At any time while accessing our site, any user may decline participation in any activity that asks for information (i.e. survey or email). Your choice not to participate will in no way affect your ability to use any other feature on our site. In online applications that ask for personal information, you have the option of canceling and terminating the application. You also are provided a way to “unsubscribe” to any newsletters, notices, schedules, etc., sent to you by email in our various contact services.

How We Protect Your Personal Information

We use industry standard practices to safeguard the confidentiality of your personal identifiable information, including encryption using secure sockets layer (SSL). We will take all reasonable precautions to safeguard the confidentiality of such information, but shall nevertheless NOT be held liable for any injury caused by the disclosure of that information, whether caused by security breach, accident, inadvertence, or any other act resulting in disclosure.

What We Provide to Third Parties

As part of the City of Fort Collins, we are governed by public records laws. Any information that we receive through use of our site is subject to the same provisions as information provided on paper. We do not share personal identifying information with any third party without your permission. We disclose only in aggregate form our statistical analyses or demographics of users to third parties. This information is not reported or used in any manner that would reveal personally identifiable information, and will not be released to any outside parties unless we are legally required to do so in connection with law enforcement investigations or other legal proceedings.

How We Use “Cookies”

“Cookies” are small pieces of information that browsers store on your computer. Most Web browsers automatically accept cookies but allow you to modify security settings so you can approve or reject cookies on a case-by-case basis. We do not store any personal information in cookies. Even if you do not use cookies, you can still access all of the features on our site.

Privacy Policy Changes

Any changes to our privacy policy will be posted on this page so that you are always aware of what information we collect, how we use it, and under what circumstances we disclose it.

Returns & Refunds

Tickets purchased online for the Fort Collins Museum of Discovery are processed through Altru, a nonprofit software database, hosted by Blackbaud, Inc. By clicking on our “Buy Tickets” button, you will be taken to a secure server through Blackbaud.

General admission tickets are good for anytime. Sorry, no refunds on online purchases at this time. 

Delivery Method and Timing

After purchase, a link to print the tickets will be emailed to the email address provided by you during the checkout process. If you are unable to print your tickets, you may also pick up your tickets by providing your order number to the museum staff in person.