University of Detroit Mercy notified California AG of a ransomware attack on third-party vendor Blackbaud's systems. The breach occurred between Feb 7 and May 20, 2020, exposing names and SSNs of affected individuals. The university offered one year of credit monitoring via Experian. The incident was resolved by paying the ransom for data destruction and patching the vulnerability.