City Facilities Management (US) LLC notified Vermont AG that a third-party vendor, Paycor, was impacted by the MOVEit Transfer vulnerability (Progress Software). The incident exposed affected individuals' addresses and Social Security numbers. City coordinated with Paycor, implemented recommended actions, and provided 24 months of credit monitoring. No specific count of affected individuals was disclosed in the filing.