The Vermont Office of the Attorney General disclosed a data breach affecting Drug Free Workplaces USA, where unauthorized actors gained access to two employee email accounts between March 29, 2023, and May 4, 2023. The incident exposed sensitive information, specifically the full names of four Rhode Island residents. While the breach was limited in scope—impacting only a small number of individuals—it involved internal employee accounts, raising concerns about potential further exposure of confidential or proprietary data. The breach was formally reported on October 26, 2023, indicating a delayed public disclosure. The compromised email accounts could have contained additional personal or corporate information, though the report did not specify whether financial, medical, or other high-risk data was accessed. The incident highlights vulnerabilities in email security protocols and the risks associated with third-party access to employee credentials.