The Vermont Office of the Attorney General disclosed on July 20, 2023, that PokerStars suffered a data breach between May 30 and May 31, 2023. Unauthorized actors gained access to and copied files containing sensitive personal information of customers, including names, addresses, and Social Security numbers (SSNs). The breach exposed critical identifiers that could facilitate identity theft, financial fraud, or targeted phishing attacks against affected individuals. While the exact number of impacted users was not specified in the report, the nature of the compromised data—particularly SSNs—heightens the risk of long-term harm, including unauthorized credit applications, tax fraud, or other malicious activities exploiting stolen identities. The incident underscores vulnerabilities in PokerStars' data security measures, raising concerns about the adequacy of safeguards for high-value customer information. Regulatory scrutiny and potential legal repercussions may follow, given the sensitivity of the exposed data and the company’s obligation to protect user privacy under data protection laws.