In a troubling incident, the Worcester Regional Retirement System experienced a significant data breach that has affected a total of 15,805 individuals. This breach, discovered on October 20, 2025, highlights the ongoing challenges organizations face in safeguarding sensitive information against cyber threats.

About Worcester Regional Retirement System

The Worcester Regional Retirement System is a governmental entity located at 23 Midstate Drive, Suite 106, Midstate Office Park, Auburn, MA 01501. This organization manages retirement benefits for public employees in the Worcester region, making the security of its data paramount for protecting the interests of its members.

What Happened

The breach occurred on June 10, 2025, when unauthorized individuals accessed the organization’s external systems through hacking. The incident was only discovered on October 20, 2025, prompting immediate action to notify affected parties. Written notifications were sent to those impacted, including approximately 150 residents from Maine.

As part of the response to this incident, the Worcester Regional Retirement System has offered identity theft protection services through IDX, which includes 12 months of credit monitoring and identity theft protection to those affected.

Next Steps

If you believe you are one of the affected individuals from this breach, we encourage you to reach out to us at SLFLA (Srourian Law Firm) to discuss your options. Our experienced legal team can help navigate the complexities of data breaches and provide guidance on protecting your rights. Don’t hesitate to contact us for assistance.