On March 14, 2025, Farmer Brothers Company detected unauthorized access to its systems, where an unknown actor infiltrated archived files between March 6 and March 14. The breach exposed sensitive personal data of 14,460 individuals across the U.S., including names, Social Security numbers (SSNs), and driver’s license numbers. The compromised data belonged to current/former employees and possibly customers, though the article emphasizes employee-related leaks. The company responded by securing systems, collaborating with federal law enforcement, and notifying affected individuals by September 9, 2025. Mitigation efforts included offering 12 months of free credit monitoring (TransUnion), identity restoration services, and guidance on fraud prevention. The breach’s scope suggests a targeted attack on internal archives, with high-risk data (SSNs) being the primary exposure, elevating concerns over identity theft and financial fraud.
Source: https://www.claimdepot.com/data-breach/farmer-brothers-2025
TPRM report: https://www.rankiteo.com/company/farmer-brothers
"id": "far3792337091025",
"linkid": "farmer-brothers",
"type": "Breach",
"date": "3/2025",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': '14,460 individuals (including 9 '
'in Maine and 1,573 in '
'Washington)',
'industry': 'Food and Beverage (Coffee '
'Manufacturer/Distributor)',
'location': 'United States',
'name': 'Farmer Brothers Company',
'type': 'Corporation'}],
'customer_advisories': ['Written notifications sent on 2025-09-09',
'Dedicated call center for support',
'Guidance on credit monitoring enrollment and fraud '
'prevention'],
'data_breach': {'data_exfiltration': 'Potential (archived files and folders '
'accessed)',
'file_types_exposed': ['Archived files'],
'number_of_records_exposed': '14,460',
'personally_identifiable_information': ['Names',
'Social Security '
'numbers',
'Driver’s license '
'numbers'],
'sensitivity_of_data': 'High (includes SSNs and driver’s '
'license numbers)',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)']},
'date_detected': '2025-03-14',
'date_publicly_disclosed': '2025-09-10',
'description': 'On March 14, 2025, Farmer Brothers Company discovered '
'unauthorized access to its systems, exposing sensitive '
'personal information of 14,460 individuals, including names, '
'Social Security numbers, and driver’s license numbers. The '
'breach occurred between March 6 and March 14, 2025. The '
'company responded by securing systems, launching an '
'investigation with federal law enforcement, and offering '
'affected individuals 12 months of complimentary credit '
'monitoring and identity restoration services through '
'TransUnion.',
'impact': {'brand_reputation_impact': 'Potential negative impact due to '
'exposure of sensitive personal data',
'data_compromised': ['Names',
'Social Security numbers',
'Driver’s license numbers'],
'identity_theft_risk': 'High (due to exposure of SSNs and driver’s '
'license numbers)',
'systems_affected': ['Archived files and folders']},
'initial_access_broker': {'high_value_targets': ['Archived files and folders '
'containing PII']},
'investigation_status': 'Completed (as of September 2025)',
'post_incident_analysis': {'corrective_actions': ['Reviewed existing security '
'policies',
'Implemented additional '
'administrative '
'safeguards']},
'references': [{'source': 'Maine Attorney General Data Breach Notification'},
{'date_accessed': '2025-09-10',
'source': 'Washington Attorney General Disclosure'}],
'regulatory_compliance': {'regulatory_notifications': ['Maine Attorney '
'General (9 affected '
'individuals)',
'Washington Attorney '
'General (1,573 '
'affected '
'individuals)']},
'response': {'communication_strategy': ['Written notifications sent to '
'affected individuals on 2025-09-09',
'Dedicated call center for questions '
'and enrollment'],
'containment_measures': ['Secured systems immediately after '
'detection'],
'incident_response_plan_activated': True,
'law_enforcement_notified': True,
'recovery_measures': ['Offered 12 months of complimentary credit '
'monitoring and identity restoration '
'services',
'Provided guidance on fraud alerts, credit '
'freezes, and free credit reports'],
'remediation_measures': ['Reviewed existing policies',
'Implemented additional administrative '
'safeguards'],
'third_party_assistance': ['Federal law enforcement',
'TransUnion (credit monitoring)',
'CyberScout (call center support)']},
'threat_actor': 'Unknown',
'title': 'Farmer Brothers Company Data Breach (March 2025)',
'type': 'Data Breach'}