The Vermont Office of the Attorney General disclosed a data breach affecting Jerry Baker, involving unauthorized access to its e-commerce platform (CommerceV3) between November 24, 2021, and December 14, 2022. The incident, detected on June 30, 2023, exposed sensitive customer data, including names, email addresses, billing addresses, payment card numbers, CVV codes, and expiration dates. At least one Rhode Island resident was confirmed impacted, though the full scope of affected individuals remains unclear. The breach posed significant risks, as exposed payment card details (including CVV codes) could enable fraudulent transactions or identity theft. While the exact method of unauthorized access was not specified, the prolonged exposure window (over a year) heightened vulnerabilities. The incident underscored failures in securing e-commerce infrastructure, particularly in safeguarding financial data—a high-value target for cybercriminals. No ransomware involvement was reported, but the leak of full payment card information suggests severe operational and reputational consequences for Jerry Baker, potentially eroding customer trust and triggering regulatory scrutiny under data protection laws.