The Vermont Office of the Attorney General disclosed a data breach affecting Fitzgerald, DePietro & Wojnas CPAs, P.C. on October 9, 2024. The incident, detected on June 19, 2024, involved unauthorized access to the firm’s network, compromising sensitive personal information. The exposed data included names, Social Security numbers, and financial details of individuals, though the exact number of affected parties remains undetermined as of August 26, 2024.The breach poses significant risks, as the leaked information (SSNs and financial records) can facilitate identity theft, financial fraud, or targeted phishing attacks against victims. Given the nature of the exposed data—highly sensitive and directly tied to individuals’ financial and personal identities—the incident carries severe implications for both the affected individuals and the firm’s reputation. The prolonged gap between discovery (June 19) and public disclosure (October 9) may further exacerbate trust issues, potentially leading to regulatory scrutiny or legal repercussions.As a CPA firm, the company handles confidential client data, making this breach particularly damaging to its credibility. The lack of clarity on the number of victims adds uncertainty, but the exposure of SSNs and financial details alone classifies this as a high-severity incident with lasting consequences for those impacted.