On May 15, 2025, the Maine Attorney General's Office disclosed a data breach affecting Duo County Telephone Cooperative Corporation, Inc. (operating as Duo Broadband). The incident, detected on March 17, 2025, involved unauthorized access to a database containing sensitive personal information of 42,518 individuals. Compromised data included full names, home addresses, dates of birth, and Social Security Numbers (SSNs)—high-risk details frequently exploited for identity theft and financial fraud. The breach exposed customers to long-term vulnerabilities, including potential fraudulent account openings, loan applications, or tax fraud, given the permanence of SSNs. In response, the company partnered with Kroll to provide 12 months of identity theft protection services to affected individuals. However, the incident underscores systemic risks in telecommunications infrastructure, where third-party vendors or insufficient access controls may enable large-scale data exfiltration. The breach’s scale and the nature of the exposed data suggest prolonged operational and reputational consequences for the cooperative, including regulatory scrutiny, customer churn, and potential litigation.