Georgetown Brewing Company, a craft brewery, experienced a data breach on August 22, 2025. This incident involved a ransomware attack where a threat actor gained unauthorized access to the company's systems. The company issued breach notification letters on September 26, 2025, and also reported the breach to state Attorney Generals in Indiana and Montana on the same date.
The breach exposed the contact information of 19,696 individuals. While the breach had a national scope across the USA, Montana specifically reported 13 affected individuals. No SSN, medical, or financial data was involved in this incident. It remains unclear how long the unauthorized access persisted prior to discovery.
Data breaches can unfold over time, and additional information may become available. Notification processes to affected individuals can also be delayed.