The Vermont Office of the Attorney General disclosed that Optical Cable Corporation (OCC) fell victim to a ransomware attack on or around June 20, 2023, leading to the potential compromise of personal identifying information (PII), including names and Social Security numbers (SSNs). The incident was formally reported on July 5, 2023, though the exact number of affected individuals remains undetermined as of the disclosure.The attack targeted sensitive customer data, raising concerns over identity theft, financial fraud, and long-term reputational damage. Given the nature of the compromised information—SSNs being high-value targets for cybercriminals—the breach poses significant risks to affected individuals, including unauthorized account access, credit fraud, and phishing schemes. The company’s delayed public notification (nearly two weeks post-attack) may further exacerbate trust issues among customers and partners.As a manufacturer of fiber optic cables and connectivity solutions, OCC’s operational and supply chain integrity could also face scrutiny, particularly if the attack disrupted internal systems or proprietary data. The incident underscores the growing threat of ransomware in critical infrastructure-adjacent sectors, where PII exposure can have cascading consequences for both businesses and consumers.