On March 1, 2024, the Vermont Office of the Attorney General disclosed a data breach affecting RCI, LLC, linked to a vulnerability in the MOVEit Transfer software. The incident occurred between May 31, 2023, and June 1, 2023, enabling unauthorized access to sensitive personal data. Compromised information included names, addresses, government-issued identification numbers, and Social Security numbers (SSNs) of affected individuals. While the total number of victims remains unspecified, the breach directly impacted at least 12 individuals from Rhode Island. The exploitation of the MOVEit vulnerability allowed threat actors to exfiltrate personally identifiable information (PII), posing risks of identity theft, financial fraud, and long-term reputational harm to the company. The breach underscores the critical need for robust patch management and third-party software security oversight to prevent exploitation of known vulnerabilities in widely used enterprise tools.