Half a million people impacted by Pennsylvania State Education Association data breach

Greater than 500,000 folks had been impacted by a cyberattack on the Pennsylvania State Training Affiliation (PSEA) that occurred in July 2024.

The group revealed breach notices in a number of states and on its web site, warning its present and former members in addition to their dependants that hackers broke into their techniques final yr and stole state IDs, Social Safety numbers, monetary account numbers, cost card data, passport numbers, taxpayer IDs, medical health insurance data and medical information.

The group notified regulation enforcement and labored with cybersecurity consultants to resolve the incident. In whole, PSEA mentioned 517,487 folks had been impacted. 

“PSEA skilled a safety incident on or about July 6, 2024 that impacted our community surroundings,” the group mentioned.

“By a radical investigation and in depth evaluation of impacted information which was accomplished on February 18, 2025, we decided that the info acquired by the unauthorized actor contained some private data belonging to people whose data was contained inside sure recordsdata inside our community.”

PSEA represents greater than 177,000 lecturers, faculty nurses, bus drivers, cafeteria employees and others in roles throughout Pennsylvania’s public colleges. The group bargains compensation and advantages on behalf of faculty employees and has existed since 1852. 

The group filed breach notifications in Maine, Massachusetts and New Hampshire.

The assault on PSEA was claimed by the Rhysida ransomware gang in September. PSEA mentioned in its letters to members that it “took steps, to the very best of our means and information, to make sure that the info taken by the unauthorized actor was deleted.” 

Rhysida continues to be one of the aggressive ransomware gangs at present working, repeatedly concentrating on hospitals; church buildings; nonprofits; metropolis authorities our bodies in London, Seattle, Columbus and Hoboken; and nations like Kuwait in addition to Portugal.

Final yr, a distinguished faculty district within the Washington, D.C., suburbs mentioned it was additionally attacked by the gang, exposing the private data of almost 100,000 folks. 

Be taught extra.