The Vermont Office of the Attorney General disclosed a data breach affecting Dohman, Akerlund & Eddy, LLC on February 28, 2024, with the report filed on October 8, 2024. The incident involved unauthorized acquisition of personal information, though the exact number of impacted individuals remains unspecified. Among the compromised data were names, with potential exposure of additional sensitive details not explicitly mentioned in the report. The breach suggests a failure in safeguarding client or employee records, raising concerns over identity theft, fraud, or misuse of personal data. While the full scope of the breach—such as whether financial, medical, or other high-risk information was accessed—is unclear, the unauthorized access alone indicates a significant lapse in cybersecurity protocols. The delayed reporting (over seven months) may further exacerbate reputational and legal risks for the firm, particularly if affected parties include clients with sensitive legal or financial ties to the company.