The Jewish Federation of Greater Pittsburgh, a non-profit organization based in Pittsburgh, experienced a significant cybersecurity breach in September 2025. A cybercriminal infiltrated the organization’s network, potentially accessing sensitive personally identifiable information (PII) of tens of thousands of individuals. The compromised data included names, Social Security numbers, tax identification numbers, driver’s license or government-issued ID numbers, dates of birth, online account credentials, financial details, health insurance information, and medical records. The breach exposed highly sensitive personal and financial data, raising concerns about identity theft, financial fraud, and misuse of private health information. Legal firm Lynch Carpenter, LLP, is investigating the incident, offering affected individuals the opportunity to seek compensation through a potential class-action lawsuit. The breach underscores the severe risks posed by cyberattacks targeting non-profits and the broader implications for data privacy and security in vulnerable sectors.
TPRM report: https://www.rankiteo.com/company/jewish-federation-of-greater-pittsburgh
"id": "jew4603146092025",
"linkid": "jewish-federation-of-greater-pittsburgh",
"type": "Cyber Attack",
"date": "9/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Tens of thousands of '
'individuals',
'industry': 'Community/Religious Services',
'location': 'Pittsburgh, Pennsylvania, USA',
'name': 'Jewish Federation of Greater Pittsburgh',
'type': 'Non-profit organization'}],
'customer_advisories': 'Data breach notifications sent to affected '
'individuals; legal assistance offered via Lynch '
'Carpenter, LLP',
'data_breach': {'data_exfiltration': 'Likely (records accessed by '
'cybercriminal)',
'number_of_records_exposed': 'Tens of thousands',
'personally_identifiable_information': ['Names',
'Social Security '
'numbers',
'Tax identification '
'numbers',
'Driver’s license or '
'government-issued ID '
'numbers',
'Dates of birth',
'Online account '
'credentials'],
'sensitivity_of_data': 'High (includes SSNs, financial, and '
'medical data)',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Financial Information',
'Health Insurance Information',
'Medical Information']},
'date_publicly_disclosed': '2025-09-19',
'description': 'A cybercriminal hacker accessed the Jewish Federation of '
'Greater Pittsburgh’s network and may have accessed records '
'containing personally identifiable information (PII), '
'including names, Social Security numbers, tax identification '
'numbers, driver’s license or government-issued identification '
'numbers, dates of birth, online account access credentials, '
'financial information, health insurance information, and/or '
'medical information. The incident impacted tens of thousands '
'of individuals.',
'impact': {'data_compromised': ['Names',
'Social Security numbers',
'Tax identification numbers',
'Driver’s license or government-issued '
'identification numbers',
'Dates of birth',
'Online account access credentials',
'Financial information',
'Health insurance information',
'Medical information'],
'identity_theft_risk': 'High (due to exposure of SSNs, financial, '
'and medical data)',
'legal_liabilities': 'Potential class action claims (under '
'investigation by Lynch Carpenter, LLP)',
'payment_information_risk': 'Yes (financial information '
'compromised)'},
'investigation_status': 'Ongoing (legal investigation by Lynch Carpenter, '
'LLP)',
'references': [{'date_accessed': '2025-09-19',
'source': 'Globe Newswire Press Release'},
{'source': 'Jewish Federation of Greater Pittsburgh Website',
'url': 'https://jewishpgh.org/'},
{'source': 'Lynch Carpenter LLP',
'url': 'https://www.lynchcarpenter.com/'}],
'regulatory_compliance': {'legal_actions': 'Potential class action lawsuit '
'(investigation ongoing by Lynch '
'Carpenter, LLP)'},
'response': {'communication_strategy': 'Public disclosure via press release; '
'data breach notifications sent to '
'affected individuals'},
'threat_actor': 'Cybercriminal hacker',
'title': 'Cybersecurity Incident at Jewish Federation of Greater Pittsburgh',
'type': 'Data Breach'}