On March 24, 2023, the Vermont Office of the Attorney General reported a data breach involving Ultralife Corporation. The breach potentially exposed certain personal information, as unauthorized access occurred at their Newark, NY and Virginia Beach locations, though the specific number of individuals affected and types of compromised information are unclear.

On January 25, 2023, Ultralife Corporation suffered a data breach due to unauthorized access to its computer network. The incident exposed the personal information of 1,007 individuals, including the names and Social Security numbers of at least 2 Maine residents. While the breach was detected, the company took over two months to notify affected individuals, sending letters on March 24, 2023, along with an offer for identity theft protection services via Equifax. The compromised data—primarily Social Security numbers—poses a significant risk of identity theft, financial fraud, and long-term reputational harm to the affected individuals. Although the breach did not involve ransomware or a large-scale customer data leak, the exposure of sensitive personally identifiable information (PII) suggests a targeted attack with potential for severe consequences. The delayed notification further exacerbates the risk, as affected parties remained unprotected during the interim period. The breach underscores vulnerabilities in Ultralife Corporation’s cybersecurity defenses, particularly in safeguarding high-value employee and customer data. While the company took remedial steps post-incident, the breach’s impact on trust and regulatory compliance remains a concern.