DisclosureLens
HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)LowContained

Public Relations Society of America

bd_729f156b4364cef8 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 1, 2025

Filed

Mar 4, 2026

To disclose

26 weeks

Affected

9state residents only

Linked

6 filings

Confidence

66%
Full breach record for Public Relations Society of America

Public Relations Society of America (PRSA) experienced a data security incident in September 2025. An unauthorized actor gained access to PRSA's server environment and copied a limited amount of data, including personal information such as names. PRSA isolated systems, changed passwords, notified law enforcement, and engaged security professionals. Identity monitoring services via Kroll are being offered to affected individuals. No evidence of financial fraud or identity theft was found.

Massachusetts clock MA AG >90d26 weeks discovery → filing

Incident timeline

discovery → filing · 26 weeks / 184 days

Sep 1, 2025

Discovered

Mar 4, 2026

Filed

vs. sector median

+9 wks slower

This filing is one of 6 about the same incident.View merged incident
A leak claim by sinobi about this victim predates this filing by 146 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Indiana State AGMar 4 · first
Nebraska State AGMar 4 · first
Maine State AGMar 4 · first
Massachusetts State AGMar 4 · first · this page

Pattern: first filing Mar 4 (IN), last Mar 9 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.