In November 2025, reports emerged from the Daily Dark Web alleging a data breach at Massachusetts Prisoners' Legal Services (PLS). A threat actor claimed to have breached the organization and was offering raw data for sale. The provided samples suggest the data dates back to mid-2025.
The compromised data allegedly includes bank statements, personal information (PII), Social Security Numbers (SSN), IOLTA accounts, government grants, internal operations data, employee information, internal emails, insurance invoices (BCBS), and payroll and HRA funding details. The full extent of the affected population and the exact number of individuals impacted have not been publicly confirmed.
Details surrounding this incident, including official confirmation from PLS or regulatory bodies, remain unclear. Information can emerge at a later date, and public notifications may be delayed.