In our last meeting, someone asked about ClubExpress security.
I was in a webinar with them last week and the subject came up. They acknowledge that they cannot give absolute guarantees, but no known breaches of any databases have occurred. They provide services for some political organizations (i.e. League of Women Voters) so they see hacking attempts, but none successful. More info in the attachment.