Farmer Bros. Co. reported that on September 18, 2018, it became aware that multiple company email accounts were accessed by an unauthorized third party. The breach date listed by the CA AG is May 1, 2018. The investigation concluded in November 2018. Affected data may include names, addresses, SSNs, driver's license numbers, payment card numbers, CVVs, bank account numbers, and routing numbers. The company engaged a cyber incident response team and enhanced email security protections. Identity theft protection services were offered to affected individuals.