On October 9, 2024, the Vermont Office of the Attorney General reported a data breach affecting OsteoRemedies, LLC. The breach involved unauthorized access to an employee's email account due to a phishing incident. The exact number of individuals affected and the specific details of the compromised information remain unknown.

The Vermont Office of the Attorney General disclosed a data breach affecting OsteoRemedies, LLC, reported on May 9, 2023. The incident stemmed from a phishing attack that granted unauthorized access to employee email accounts between June 20, 2022, and August 18, 2022. The breach exposed sensitive personal information, including names and Social Security numbers (SSNs) of individuals linked to the compromised accounts. While the exact number of affected individuals was not specified, the exposure of SSNs poses significant risks, such as identity theft, financial fraud, or targeted scams. The breach was attributed to a failure in email security protocols, highlighting vulnerabilities in the company’s defenses against social engineering tactics. OsteoRemedies likely faced regulatory scrutiny and was required to notify impacted parties, offering credit monitoring or identity protection services as mitigation. The incident underscores the persistent threat of phishing as a gateway for broader data compromise, particularly when employee credentials are exploited.