\n<\/p>\n
The Pennsylvania State Education Association (PSEA), a labor union representing educators across the state, says hackers stole the sensitive personal information of more than half a million of its members.\u00a0<\/p>\n
PSEA is the largest organization for educators in Pennsylvania, representing current and former teachers, counselors, health care workers, and school social workers.<\/p>\n
In a filing with Maine\u2019s attorney general on Tuesday<\/a>, PSEA said it experienced a cyberattack in July 2024 that saw an unauthorized actor access its network to steal a trove of data belonging to more than 517,000 individuals.<\/p>\n The stolen data includes highly sensitive personal information, such as members\u2019 government-issued identification documents, Social Security numbers, passport numbers, medical information, and financial information containing card numbers, and their associated PINs and expiration dates.\u00a0<\/p>\n PSEA said member account numbers, PINs, passwords, and security codes were also accessed during the breach, according to a letter sent to affected individuals.<\/p>\n \u201cWe want to stress that not all data elements were acquired for every impacted individual,\u201d PSEA told affected members in the letter.\u00a0<\/p>\n PSEA also said it \u201ctook steps, to the best of our ability and knowledge, to ensure that the data taken by the unauthorized actor was deleted,\u201d implying that PSEA was the target of a ransomware<\/a> or data extortion<\/a> attack, and subsequently paid a ransom demand to the hackers responsible.\u00a0<\/p>\n Paying a ransom demand is no guarantee that the malicious hackers deleted the stolen data. Last year\u2019s takedown of the notorious LockBit ransomware gang unearthed evidence<\/a> that the gang\u2019s hackers still retained reams data belonging to victims who had paid a ransom demand.\u00a0<\/p>\n PSEA did not respond to TechCrunch\u2019s questions.<\/p>\n<\/div>\n