In an increasingly technology-centric world, data security is unsurprisingly among the top concerns for many organizations in 2025—and unions are no exception. Unions are responsible for storing and protecting sensitive digital data, including members’ personal details, union financial information, and collective bargaining strategies. Unfortunately, this data can attract cyber criminals seeking to profit from stolen confidential information.
Recent cyberattack incidents involving unions have demonstrated the serious level of damage these attacks can inflict. In July 2024, the Pennsylvania State Education Association (PSEA) experienced a data breach that exposed the personal information of more than 500,000 education professionals. The exposed data included member names, contact information, social security numbers, driver’s license and passport information, banking information (account/routing numbers, PINs, card numbers, etc.), usernames and passwords, health insurance information, and medical records. The PSEA now faces a class action lawsuit by current and former members whose personal data was breached. UNITE HERE, a New York-based union representing workers in the hospitality and food service industries, recently faced a similar class action suit as a result of a 2023 data breach. The union has agreed to pay $6 million to resolve the lawsuit. Unfortunately, these are just two of many examples.
All it takes is one security breach to damage a union both financially and reputationally. Cybersecurity plans are crucial for unions to protect their members, assets, and operational integrity. A strong cybersecurity plan consists of clearly established protocols put in place to minimize the risk of cyber-attacks, as well as a plan for responding to security incidents.
Below are some of the essential components of a comprehensive cybersecurity plan.
Training and Awareness
Raising awareness is one of the most important preventative measures you can take to safeguard your union against threats. Regular cybersecurity training helps employees to recognize cyber threats, implement safe cyber practices, and prevent potential attacks.
Password Policies
Just like you wouldn’t leave your house unlocked at night, you should never leave your devices and accounts unsecured. In fact, you should double-lock them…and change the locks out frequently. Strong passwords, multi-factor authentication, and regular password changes help to secure devices and accounts containing important data.
Encrypted Data
Encrypting sensitive data and communications ensures that your information is unreadable to unauthorized parties.
Firewalls, Anti-Malware, and Antivirus Software
Protections such as network firewalls, anti-malware, and antivirus software help to secure your online systems by detecting and blocking malicious activity, including viruses, malware, spyware, and ransomware. These defenses act like gatekeepers for your network, monitoring and controlling what goes in and out.
Updated Software
Outdated software systems are more vulnerable to attack. Regularly updating your union’s software is essential for maintaining your network’s resilience to threats.
Regular Risk Assessments
Regular risk assessments—conducted either internally or by a third-party cybersecurity service provider—are necessary for identifying system weaknesses and areas for improvement.
Response Plan
All unions should create a response plan outlining the steps to be followed in the case of a cybersecurity threat or incident. CISA (Cybersecurity and Infrastructure Security Agency) provides this guide for creating an Incident Response Plan (IRP), identifying actions that should be taken by an organization before, during, and after a cyber incident.
Protect Your Union’s Financial Health
Creating and implementing a comprehensive cybersecurity plan is a critical step you can take to safeguard your union’s sensitive information. When it comes to protecting your union’s financial health and integrity, partnering with RBT CPAs is another measure you can take. RBT CPAs has been serving organizations in the Hudson Valley and beyond for over 55 years. Our experts are here to support all of your union’s accounting, advisory, audit, and tax needs. Contact RBT CPAs today to find out how we can be Remarkably Better Together.








