The Maine Office of the Attorney General disclosed a ransomware attack on Blackbaud, a third-party service provider, which indirectly impacted St. Lawrence University between February 7 and May 20, 2020. The breach exposed the personal and financial account information of 464 individuals, including three Maine residents, whose names and financial details were potentially compromised. While the attack targeted Blackbaud, St. Lawrence University was among the affected institutions whose data was held hostage. In response, the university offered complimentary one-year identity theft protection services via Experian IdentityWorks to mitigate risks for the affected individuals. The incident highlights vulnerabilities in third-party vendor security and the cascading risks of ransomware attacks on interconnected systems, where sensitive data—including financial records—can be exfiltrated or encrypted for extortion.