Farmer's Rice Cooperative, a major California-based rice marketing cooperative, experienced a major data breach impacting thousands of individuals. The company discovered suspicious activity on its network on Aug. 31, 2024. An investigation revealed that a ransomware attack took place from Aug. 30 to Sept. 2, 2024.
The cybercriminal group known as PLAY claimed responsibility for the breach, which was later publicized on the dark web on Sept. 4, 2024. The cybersecurity incident compromised the personal information of at least 4,210 individuals.
Exposed information may have included names, contact information, Social Security numbers, dates of birth, and driver's license or state ID numbers. The cybercriminals claimed to have stolen a wide range of documents, including client files, budget details, payroll records, accounting data, contracts, tax information and identification documents.
Farmer's Rice Cooperative began notifying affected individuals by mail on July 1, 2025. The data breach was also disclosed to the California and Maine Attorney Generals' offices beginning on Aug. 19, 2025.
In addition to required state and federal disclosures, Farmer's Rice Cooperative is offering affected individual free IDX identity monitoring services, which includes credit and CyberScan monitoring, a $1,000,000 insurance and fully managed ID theft recovery services. Affected individuals have until Oct. 1, 2025, to enroll in these services.
If you receive a notice from Farmer's Rise Cooperative about this breach, you may want to:
More information can be found on the Farmer's Rice Cooperative website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.