Philadelphia Corporation for Aging Data Breach Affects 410,491 People

On or about July 25, 2025, Philadelphia Corporation for Aging (PCA) detected suspicious activity within its internal network, signaling a potential cybersecurity incident. An investigation found that between July 10 and July 25, 2025, an unauthorized actor may have accessed and copied sensitive information from PCA’s systems.

PCA completed a review of the impacted data on Oct. 23, 2025 and began notifying affected individuals by mail on Nov. 4, 2025. Compromised information included names, dates of birth, Social Security numbers, credit card numbers, financial account information, health insurance information and medical information. PCA finished a second review on Feb. 26, 2026 and mailed a second round of letters on March 13, 2026. The March 2026 notice says the information involved may also have included tax ID numbers, medical diagnosis information and Medicaid information.

PCA reported the breach to the U.S. Department of Health and Human Services (HHS) on Sept. 23, 2025 and told HHS that 410,491 people were affected. The breach was also formally disclosed to the Maine Attorney General, the Massachusetts Attorney General and the New Hampshire Attorney General on Nov. 4, 2025. State filings show that three residents in Maine, 39 in Massachusetts and 10 in New Hampshire may have been affected.

The cybersecurity incident was subsequently disclosed to the Vermont Attorney General on Nov. 6, 2025. PCA filed updated notices with the New Hampshire and Vermont attorneys general in March 2026.

Philadelphia Corporation for Aging's response

In response to the breach, PCA took steps to secure its systems, engaged external cybersecurity experts and notified law enforcement. In addition to required state and federal disclosures, the organization is offering affected individuals at least 12 free months of TransUnion Cyberscout credit monitoring, fraud assistance and remediation services.

If you receive a notice from PCA about this breach, you may want to:

• Sign up for the free credit monitoring services, offered by the company.
• Monitor your credit reports and financial accounts for any unusual activity.
• Be alert for phishing emails or phone calls that may use your exposed information.
• Consider placing a fraud alert or credit freeze with major credit bureaus.

Philadelphia Corporation for Aging also established an assistance line for individuals with questions at 1-833-647-0358, Monday through Friday from 8:00 a.m. to 8:00 p.m. Eastern Time.