The Vermont Office of the Attorney General reported a data breach involving Reading Cooperative Bank on February 24, 2025. The breach resulted from a phishing email incident, potentially impacting individuals' personally identifiable information. The number of individuals affected and specific types of information compromised are currently unknown.

The Maine Office of the Attorney General disclosed a data breach at Reading Cooperative Bank, discovered on January 31, 2025, but originating from an external phishing incident on August 8, 2024. The breach compromised personally identifiable information (PII) of 24,041 individuals, including 89 Maine residents. The exposed data likely included sensitive personal details, though the exact nature (e.g., financial records, Social Security numbers, or contact information) was not explicitly outlined. The incident stemmed from a successful phishing attack, a common vector for unauthorized access, where threat actors deceived employees into divulging credentials or executing malicious payloads. While the bank took steps to mitigate the fallout—such as notifying affected parties and coordinating with regulatory bodies—the breach underscores vulnerabilities in employee awareness and email security protocols. The delayed detection (nearly five months between the breach and discovery) further exacerbates risks, as prolonged exposure increases the potential for fraud, identity theft, or secondary attacks. No ransomware was reported, but the scale and sensitivity of the leaked data suggest significant reputational and operational consequences for the bank.