This is unfortunate.
http://www.pcmag.com/article2/0,2704,2216161,00.asp
Some people have nothing better to do. It is however an inherent risk (among others) of placing your donor information in the hands of a third party.
It also brings up issues regarding acquisitions. Apparently, the donor data was acquired by Convio from GetActive's legacy systems. Regardless of how careful both parties are, its easy to not address all vulnerabilities when integrating 2 large datasets.
It's very unfortunate. Hopefully, the good people that donated to the victimized nonprofits won't be subjected to any more harmful consequences.






