The Penn State Education Association (PSEA), a union representing educators across the state, said hackers stole sensitive personal information from more than one million members.
PSEA is the largest educator organization in Pennsylvania, representing current and former teachers, counselors, health care workers, and school social workers.
exist Submit documents to Maine Attorney General TuesdayPSEA said it experienced a cyber attack in July 2024 that allowed unauthorized actors to access their networks to steal data belonging to more than 517,000 people.
The stolen data includes highly sensitive personal information, such as member government-issued ID documents, social security numbers, passport numbers, medical information, and financial information containing card numbers and their associated pins and expiration dates.
According to the letters sent to affected individuals, member accounts, pin counts, passwords and security codes were also accessed during the violation.
“We want to emphasize that not all affected people have access to all the data elements,” the PSEA told the affected members in the letter.
PSEA also said that “to the best of our ability and knowledge have taken steps to ensure data from unauthorized actors have been deleted”, meaning PSEA is a goal. Ransomware or Data ransomware The attack followed by a ransom claim to be paid to the responsible hacker.
The need to pay a ransom does not guarantee that a malicious hacker has deleted the stolen data. Last year’s notorious Lockbit ransomware gang Evidence of discovery The gang’s hackers still retain data belonging to victims of ransom demand.
PSEA did not answer TechCrunch’s question.
