The Honolulu Museum of Art experienced a data breach between February 7, 2020, and May 20, 2020, facilitated by a third-party vendor, Blackbaud, Inc. The incident exposed sensitive personal information of affected individuals, including first and last names, addresses, and Social Security numbers (SSNs). While the museum took corrective measures—such as engaging cybersecurity experts, reporting the incident to the Federal Bureau of Investigation (FBI), and offering complimentary credit monitoring and identity protection services via IDX—the breach posed significant risks. Exposed SSNs are high-value targets for identity theft, financial fraud, and long-term exploitation. The reliance on a third-party provider introduced vulnerabilities, highlighting supply-chain risks in data security. The museum’s response aimed to mitigate harm, but the breach’s scope and the nature of the compromised data (particularly SSNs) elevated its severity, as such information can be used for fraudulent activities like loan applications, tax fraud, or unauthorized account access.