Step By Step: Step By StepData Breach?

Step By Step Investigates Possible Data Breach Following Alleged Cyberattack

Step By Step, a Pennsylvania-based nonprofit providing vocational, housing, and clinical support to individuals with disabilities and mental health conditions, is under investigation for a potential data breach. The suspected incident, reportedly carried out by the hacker group Storm, is believed to have occurred on October 2, 2026.

Legal teams are examining whether a class action lawsuit can be filed on behalf of affected individuals, including current and former employees, clients, and their families. While details about the breach’s scope and nature remain unconfirmed, attorneys are seeking input from those who may have had their personal information exposed.

Cybersecurity monitoring site Ransomware.live first reported Storm’s claim of responsibility for the attack. As of October 5, 2026, no official confirmation or additional details about the breach have been released by Step By Step. The investigation remains ongoing.

Source: https://www.classaction.org/data-breach-lawsuits/step-by-step-october-2026

Step By Step TPRM report: https://www.rankiteo.com/company/step-by-step-learning-group-inc-

"id": "ste1791239392",
"linkid": "step-by-step-learning-group-inc-",
"type": "Breach",
"date": "10/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Current and former employees, '
                                              'clients, and their families',
                        'industry': 'Healthcare/Social Services',
                        'location': 'Pennsylvania, USA',
                        'name': 'Step By Step',
                        'type': 'Nonprofit'}],
 'data_breach': {'sensitivity_of_data': 'High (individuals with disabilities '
                                        'and mental health conditions)',
                 'type_of_data_compromised': 'Personal information'},
 'date_detected': '2026-10-02',
 'date_publicly_disclosed': '2026-10-05',
 'description': 'Step By Step, a Pennsylvania-based nonprofit providing '
                'vocational, housing, and clinical support to individuals with '
                'disabilities and mental health conditions, is under '
                'investigation for a potential data breach following a '
                'suspected cyberattack by the hacker group Storm on October 2, '
                '2026. Legal teams are examining the possibility of a class '
                'action lawsuit for affected individuals, including current '
                'and former employees, clients, and their families.',
 'impact': {'legal_liabilities': 'Potential class action lawsuit'},
 'investigation_status': 'Ongoing',
 'references': [{'date_accessed': '2026-10-05', 'source': 'Ransomware.live'}],
 'regulatory_compliance': {'legal_actions': 'Potential class action lawsuit'},
 'threat_actor': 'Storm',
 'title': 'Alleged Cyberattack on Step By Step Leading to Potential Data '
          'Breach',
 'type': 'Data Breach'}