On May 5, 2025, Farm Credit East, ACA experienced a data breach reported by the Vermont Attorney General's Office on May 15, 2025. The incident involved the inadvertent disclosure of a document containing sensitive personal information, specifically Social Security Numbers (SSNs), to an unauthorized recipient. The exact number of affected individuals remains undetermined as of the report. The breach stems from a procedural error where confidential data was misdirected, potentially exposing recipients to risks such as identity theft or financial fraud. While the scope of the exposure (e.g., whether the incorrect recipient was internal or external) is unclear, the inclusion of SSNs elevates the severity due to their high value in cybercriminal markets. The company has not disclosed whether additional protective measures, such as credit monitoring for affected parties, have been implemented. The incident highlights vulnerabilities in data-handling protocols, particularly in verifying recipient details before transmitting sensitive documents. No evidence suggests malicious intent (e.g., hacking or ransomware), but the unintentional disclosure of SSNs constitutes a significant privacy violation under regulatory frameworks like state breach notification laws.