On March 14, 2025, Farmer Brothers Company detected unauthorized access to its systems, where an unknown actor infiltrated archived files between March 6 and March 14. The breach exposed sensitive personal data of 14,460 individuals across the U.S., including names, Social Security numbers (SSNs), and driver’s license numbers. The compromised data belonged to current/former employees and possibly customers, though the article emphasizes employee-related leaks. The company responded by securing systems, collaborating with federal law enforcement, and notifying affected individuals by September 9, 2025. Mitigation efforts included offering 12 months of free credit monitoring (TransUnion), identity restoration services, and guidance on fraud prevention. The breach’s scope suggests a targeted attack on internal archives, with high-risk data (SSNs) being the primary exposure, elevating concerns over identity theft and financial fraud.

The California Office of the Attorney General disclosed a data breach affecting Farmer Bros. Co. on December 11, 2018, stemming from an incident on September 18, 2018. An unauthorized third party gained access to multiple company email accounts, potentially exposing the personal and financial information of affected individuals. While the exact number of impacted individuals remains undisclosed, the breach raises concerns over the security of sensitive data, including possible financial records and personally identifiable information (PII). The attack vector suggests a targeted intrusion, likely through phishing or credential compromise, leading to unauthorized data access. The breach underscores vulnerabilities in email security protocols and the broader risks of financial and identity theft for those affected. No ransomware was reported in the incident, but the exposure of financial data elevates the severity due to the potential for fraud and long-term reputational harm to the company.