Every week seems to bring news of another company reporting a cybersecurity incident. While not every breach results in identity theft or a lawsuit, consumers should pay attention when sensitive personal information may have been exposed.
Here’s a look at several developments that Pennsylvania consumers should be aware of this week.
Hunter Associates Data Breach Continues to Draw Attention
One of the data breaches we continue to monitor closely is the Hunter Associates incident involving a Pittsburgh-based investment management firm.
Since the breach became public, a number of well-known law firms have announced investigations into the incident. However, as of today, no class action lawsuit has been filed, according to publicly available court records and announcements from firms investigating the matter.
If you were notified that your information may have been affected, now is a good time to:
- Carefully read the notification letter.
- Determine exactly what information was involved.
- Enroll in any complimentary credit monitoring or identity protection services being offered.
- Monitor your bank, investment, and credit accounts for suspicious activity.
- Consider placing a fraud alert or security freeze with the major credit bureaus if Social Security numbers or other sensitive information were involved.
Many people mistakenly believe they should wait until fraudulent activity occurs before taking action. In reality, monitoring your accounts early can often help detect identity theft before significant financial harm occurs.
Why Lawsuits Often Take Time
Consumers are often surprised that lawsuits are not filed immediately after a breach is announced.
There are several reasons for this:
- Companies may still be investigating what happened.
- Forensic experts often need weeks or months to determine exactly what information was accessed.
- Attorneys frequently conduct their own investigations before deciding whether litigation is appropriate.
- Additional affected individuals may continue to be identified after the initial announcement.
For these reasons, it is common for investigations to continue for some time before any litigation decisions are made.
Other Pennsylvania Data Breaches
Several other Pennsylvania organizations have experienced cybersecurity incidents over the past year. In a number of those matters, class action lawsuits have already been filed or settlements have already been reached.
That means consumers who receive notices relating to those incidents should carefully review any correspondence they receive, particularly if it discusses settlement rights, claims processes, or available identity protection services.
Healthcare Breaches Continue to Be a Major Concern
Healthcare organizations remain one of the most frequent targets for cybercriminals.
Medical records often contain:
- Social Security numbers
- Insurance information
- Dates of birth
- Addresses
- Medical histories
- Financial information
Because medical information cannot simply be “changed” like a password, healthcare breaches can create long-term risks for identity theft and medical fraud.
If your healthcare provider notifies you of a breach, do not ignore the letter—even if you have not noticed any suspicious activity.
Don’t Ignore a Breach Notification
Many consumers assume a breach notification is simply informational. In reality, it may be the first indication that your personal information is at risk.
If you receive a notification:
- Save the letter.
- Keep copies of any emails.
- Watch your credit reports.
- Review financial and investment accounts regularly.
- Document any unauthorized activity immediately.
Keeping organized records can be important if identity theft later occurs.
Today’s Reminder for PSEA Members
If you are a current or former member of the Pennsylvania State Education Association (PSEA), be aware that certain settlement deadlines related to its previously announced data breach may apply. If you received a settlement notice, review it promptly to determine whether any action is required before applicable deadlines.
We’re Monitoring New Developments
Cybersecurity incidents continue to evolve rapidly. New information often becomes available weeks or even months after a breach is first announced.
Our office regularly monitors publicly reported data breaches affecting Pennsylvania consumers and follows developments involving:
- Financial institutions
- Healthcare providers
- Employers
- Educational institutions
- Law firms
- Government agencies
As additional information becomes available regarding recently reported incidents, we will continue providing updates to help consumers understand what happened, what information may have been affected, and what practical steps they can take to protect themselves.
If you recently received a data breach notification and are unsure what it means or what you should do next, staying informed and acting quickly are often the best first steps toward protecting your personal information.
