On April 29, 2024, the Vermont Office of the Attorney General disclosed a data breach affecting the Catholic Diocese of Cleveland. The incident occurred between December 14, 2023, and January 12, 2024, when unauthorized actors gained access to an employee’s business email account. The breach may have exposed personal information, including names, though the exact number of impacted individuals remains undetermined. The compromised email account suggests potential risks of phishing or credential theft, leading to unauthorized data access. While the full scope of the breach is still under investigation, the exposure of employee-related communications raises concerns about internal data security protocols and the possibility of further exploitation of sensitive information. The Diocese has not confirmed whether additional details—such as financial records, contact information, or other personally identifiable data—were accessed, but the incident underscores vulnerabilities in email security and employee account protection.