A few years ago, a San Francisco nonprofit got hit with ransomware. Their team lost access to years of client records overnight. Case files. Donor information. Program data staff had spent months building. They had to notify hundreds of families that their personal information may have been compromised.