HackingEducationProfessional ServicesEducationData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountFinancial credentialsCredentialsPHIHealth (basic)MediumContained

Pennsylvania State Education Association

bd_e3037620ed0e1d3f · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 18, 2025

To disclose

—

Affected

Not disclosed

Linked

11 records

Confidence

65%

Full breach record for Pennsylvania State Education Association →

Pennsylvania State Education Association (PSEA) experienced a security incident on or about July 6, 2024, impacting its network environment. An unauthorized actor acquired data containing personal information, including names, SSNs, driver's license numbers, financial account details, and health insurance information. PSEA engaged external cybersecurity professionals and notified law enforcement. The investigation concluded on February 18, 2025. Credit monitoring and identity restoration services are offered to impacted individuals with SSNs.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Jul 6, 2024

Begins

Mar 18, 2025

Filed

This filing is one of 11 records about the same incident.View merged incident

A leak claim by rhysida about this victim was first seen 190 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siterhysidabd_9ec6a1b78fc5745e2024-07-06 · +255dVerified by operator

Regulatory filings (9) · sorted by filing gap

Massachusetts State AGbd_118ed495b3e5b1fd2025-03-18Verified
Maine State AGbd_18c2400cad54db482025-03-18Verified
New Hampshire State AGbd_410f8f4728a914372025-03-18Verified by operator
Washington State AGbd_4eadf3bce2328f762025-03-18Verified by operator

Show 5 more filings ↓up to 1d gap

Montana State AGbd_8b3ad0c34719e9662025-03-18Verified
Maryland State AGbd_b6cf1deaa264fa8a2025-03-18Verified by operator
Vermont State AGbd_ab8d33219fbbcab52025-03-19 · +1dVerified by operator
Indiana State AGbd_86a32e9f685891e12025-03-17 · +1dVerified by operator
Nebraska State AGbd_cf0a4f5883e3837c2025-03-17 · +1dVerified by operator

Name: Pennsylvania State Education Association
norm: pennsylvania state education
Domain: psea.org

Name: Pennsylvania State Education Association
norm: pennsylvania state education
Domain: psea.org
Industry: EducationllmProfessional Servicesllm

Discovered: —
Breach occurred: Jul 6, 2024
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountFinancial credentialsCredentialsPHIHealth (basic)
Data elements: Social Security numberDate of birth
Attack vector: Unknown
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified law enforcement of the incident

During the incident: Commenced a prompt and thorough investigation
Worked closely with external cybersecurity professionals
Notified law enforcement of the incident
Reviewing its existing policies and training protocols relating to data protection
Enhancing security measures and monitoring tools
Provided access to credit monitoring and identity restoration services through IDX
Changes made: Reviewing its existing policies and training protocols relating to data protection
Enhancing security measures and monitoring tools
Continually evaluate and modify our practices and internal controls to enhance the security and privacy of the protected personal information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.