The California Office of the Attorney General disclosed a data breach affecting Academic Therapy Publications in October 2021. The incident involved unauthorized access to customer data tied to online transactions, spanning from December 20, 2017, to September 20, 2021. The breach, which occurred between January 6, 2020, and July 25, 2021, exposed sensitive personal and financial information, including names, addresses, phone numbers, email addresses, and debit/credit card details. The compromised data poses significant risks, such as potential financial fraud, identity theft, and phishing attacks targeting affected individuals. While the breach did not involve ransomware or a full-scale system takeover, the exposure of payment card information and personally identifiable details elevates the severity due to the direct financial and reputational harm to customers. The prolonged duration of the breach—both in terms of the exposed data period and the unauthorized access window—further exacerbates the impact, as threat actors had extended opportunities to exploit the stolen information. The company’s failure to detect the intrusion for over a year highlights vulnerabilities in its cybersecurity defenses, raising concerns about compliance with data protection regulations and the adequacy of monitoring systems. Customers impacted by the breach face long-term risks, including unauthorized transactions and misuse of their personal data in secondary attacks.