San Francisco Conservatory of Music notified individuals that their personal information may have been accessed by an unknown actor via a ransomware incident at third-party vendor Blackbaud, Inc. Data was exfiltrated before Blackbaud locked the actor out on May 20, 2020. SFCM learned of the impact on September 29, 2020. Affected data includes names and potentially financial account information. SFCM is offering 24 months of credit monitoring.