Print Media Association (PMA), a nonprofit trade association serving the printing and graphic communications industry, experienced a major data breach. The company discovered suspicious activity within its internal email environment on May 5, 2025. An investigation revealed that a cybercriminal accessed certain email accounts between May 1, 2025 and May 5, 2025.
A review was completed on Aug. 11, 2025, and determined that several thousand individuals were impacted by the data breach. Compromised information includes names and Social Security numbers. According to reports, additional information such as driver's license numbers, financial account information and medical information may have also been exposed.
Print Media Association disclosed the cybersecurity incident to the California, New Hampshire, Maine, Massachusetts, Texas and Vermont Attorney Generals' offices beginning on Sept. 10, 2025. The company began notifying affected individuals by mail on the same day.
The breach’s severity lies in the nature of the information compromised. With Social Security numbers and possibly financial account details exposed, affected individuals are at much greater risk for identity theft and financial fraud. Impacted individuals include 3,085 in Texas, 258 Massachusetts residents, three in New Hampshire and two in Maine.
After learning of the breach, PMA initiated containment measures and launched an internal investigation. In addition to required state and federal disclosure, the company is offering impacted individuals 24 free months of Experian IdentityWorks credit monitoring services.
If you receive notification from Print Media Association about this breach, you may want to:
Learn more about the company by visiting the Print Media Association website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.