NY union breach: 47K members’ SSNs exposed in May 2025 hack

The Civil Service Employees Association (CSEA) had malicious actors roaming its systems for nearly a month, possibly accessing personal details of tens of thousands of its members.

CSEA has reached out to thousands of members to inform them of the 2025 data breach. According to the breach notification letter, attackers roamed the organization’s systems between May 3rd, 2025, and May 31st, 2025.

CSEA is a labor union in the state of New York that represents employees in state and local governments. The organization has around 300,000 members. Meanwhile, information submitted by CSEA to the Maine Attorney General’s Office revealed that the data breach exposed the personal information of over 47,000 individuals.

According to the breach notice, CSEA noticed unauthorized access in late May and immediately launched an investigation. In the process, the labour union took systems offline, changed passwords, and deployed “advanced security and detection software.”

“During this time period, we identified that files containing your information were obtained by an unauthorized party. Our investigation did not identify any evidence of misuse of your Information for fraud or identity theft related to the Incident,” CSEA explained.

The investigation into the incident revealed that attackers may have accessed members' names and Social Security numbers (SSNs). Malicious actors could attempt to use the exposed details for identity theft.

At least in theory, attackers could attempt to set up fraudulent credit accounts, submit tax returns, and attempt to access benefits in the victims’ names. Most worryingly, SSNs are permanent and can’t be changed, which creates long-term cybersecurity risks for anyone involved.

“We worked with leading cybersecurity and privacy firms to aid in our investigation and response, and after determining unauthorized activity occurred on our systems, we immediately began analyzing the information involved to confirm the identities of potentially affected individuals to notify them,” the labor union’s notice said.

Impacted individuals are advised to remain vigilant and regularly monitor credit reports, review account statements, and be wary of any suspicious activity. There are multiple ways in which individuals can protect themselves from identity theft. The Cybernews team outlines several of them here.

CSEA is a major labor union. It is the largest constituent of the American Federation of State, County, and Municipal Employees (AFSCME), the largest trade union of public employees in the United States. CSEA accounts for roughly a quarter of AFSCME members.

Unlock more exclusive Cybernews content on YouTube.