The Vermont Office of the Attorney General disclosed that Ferguson Wellman Capital Management suffered a data breach on December 22, 2022, with unauthorized access detected around December 21, 2022. The incident exposed sensitive client information, including names, Social Security numbers, and financial account numbers, though the exact number of affected individuals remains undisclosed. While the breach did not involve ransomware or a full-scale system takeover, the exposure of personally identifiable information (PII) and financial data poses significant risks, such as identity theft and fraudulent activity. In response, the company is providing complimentary credit monitoring and identity protection services to mitigate potential harm. The breach highlights vulnerabilities in data security protocols, particularly concerning high-value financial and personal records. No evidence suggests the data was misused, but the exposure alone warrants heightened scrutiny of cybersecurity measures to prevent future incidents.