La Jolla Country Day School reported a data breach involving its third-party vendor, Blackbaud. A ransomware attack occurred between February 20, 2020, and May 20, 2020. The incident exposed personal information including names, addresses, phone numbers, birth dates, and Social Security numbers or Taxpayer Identification Numbers. The school notified affected individuals and offered 24 months of credit monitoring. The FBI was engaged, and a ransom was paid.