CSEA Local 1000, a labor union based in New York, discovered unauthorized activity on its computer systems on May 30, 2025. An investigation revealed that unauthorized access occurred between May 3 and May 31, 2025, during which files containing personal information were obtained by an unauthorized party. The breach affected over 47,000 individuals.
The confirmed data types exposed in this incident include names and Social Security numbers (SSNs). At least six residents in Maine were affected, along with individuals in Vermont and Massachusetts, with broader U.S. impact indicated. There is no evidence of medical or additional financial data being involved. Official breach notification letters were mailed starting January 20, 2026, and offered 24 months of complimentary credit monitoring.
Details about this incident can continue to emerge, and official notifications may be delayed.