STRATeBEN, Inc. disclosed a phishing incident affecting 2 Vermont residents. An employee's Microsoft 365 account was compromised between August 14 and November 9, 2025, exposing names, Social Security numbers, and dates of birth. STRATeBEN secured the account, engaged a third-party cybersecurity firm, and mailed notifications on March 26, 2026, offering one year of credit monitoring.
Affected (this filing): 2