Pennsylvania education union data breach affects 517,000

The Pennsylvania State Education Association (PSEA) has reported a serious data breach that may affect over 517,000 people. This incident occurred in July 2024 and was linked to a ransomware attack. The affected individuals have been notified by letter about the breach. PSEA serves public school educators, higher education staff, and retired teachers in Pennsylvania. It plays an essential role in contract negotiations and education policy advocacy. The breach has exposed sensitive personal information, including names, Social Security numbers, and health details, putting many at risk for identity theft and fraud. The organization announced the breach after completing a detailed investigation in February 2025. It found that various types of personal, financial, and medical information had been accessed. The PSEA has not confirmed the identity of the hackers, but a group called Rhysida claimed responsibility for the attack. Rhysida reportedly demanded a ransom of 20 Bitcoin, worth about $1.1 million at the time. It is unclear whether PSEA paid the ransom or not, but reports indicate the threat may have been removed from certain dark web sites.