In July 2024, the Pennsylvania State Education Association (PSEA) suffered a major data breach exposing the personal information of more than 500,000 members.

This included not just names and contact details, but Social Security numbers, driver’s license and passport information, banking data and even medical records.

This wasn’t a minor lapse, it was a total breakdown of one of the most basic responsibilities any organization has — protecting the people it claims to serve.

What makes this breach even more disturbing is how long PSEA waited to inform its members. The intrusion happened in July, but members weren’t notified until March 2025. That’s nearly eight months of silence — eight months during which members had no idea their most sensitive information was in the hands of hackers.

No organization that truly values its members would suppress a crisis of that magnitude for that long.

This isn’t just about a cybersecurity failure. It’s about what that failure reveals.

PSEA didn’t treat its members’ personal information with the seriousness it deserves. And if they didn’t prioritize something as critical as your identity, your finances and your privacy, what makes anyone think they’re handling anything else responsibly?

Unions claim to be strong advocates. But real advocacy begins with trust — and trust begins with competence.

If PSEA can’t keep your personal data secure, how can they be trusted to negotiate your contract, protect your job or speak on your behalf?

Their lack of transparency and accountability in this situation speaks volumes about how they operate. It’s not just lax data security; it’s inept leadership.

This incident makes one thing clear: PSEA is not functioning in a way that puts members first. And if it can’t handle the most basic responsibilities, it’s in no position to effectively represent public employees in today’s complex and demanding environment.