San Francisco Symphony experienced a cyber-attack between September 7 and September 22, 2021, resulting in unauthorized access to one company email account. The incident potentially exposed personal information of employees, former employees, and temporary individuals, including names, addresses, Social Security numbers, dates of birth, and email addresses. The Symphony engaged forensic investigators, reset passwords, and offered 12 months of identity theft protection services through IDX to affected individuals.