San Francisco University High School reported a data breach involving its vendor, Blackbaud, Inc. Unauthorized access occurred between Feb 7 and May 20, 2020. The attacker attempted a ransomware attack, exfiltrated unencrypted backup files containing names and SSNs, and attempted to encrypt files. Blackbaud paid a ransom and confirmed file destruction. The school notified affected individuals and offered two years of identity monitoring.