Worcester Regional Retirement System Data Breach Lawsuit Investigation
On October 20, 2025, Worcester Regional Retirement System (“WRRS”) began notifying members that a June 2025 cyber-attack may have exposed sensitive personal information. Regulatory filings now confirm that 13,945 Massachusetts residents were impacted. If you received a notice, you may qualify for no-cost legal help and identity protection resources.
Act now: review the facts below, confirm whether your data was involved, and explore your legal rights to possible compensation.
Download Official Maine Breach Notice (PDF)Download Massachusetts AG Breach Notice (PDF)
Timeline of the Worcester Regional Retirement System Data Breach
- June 10, 2025 – A network disruption occurs within WRRS systems.
- September 15, 2025 – Independent investigators confirm that certain data was accessed and acquired without authorization.
- October 10, 2025 – Internal review identifies personal information contained in the affected files.
- October 20, 2025 – WRRS issues consumer notifications and reports the incident to the Maine Attorney General.
What Data Was Compromised?
According to the notice filed with state regulators, the information varied by individual and may include:
- Name
- Social Security number
- Driver’s license or state ID number
- Medical information
- Insurance information
Complimentary Identity Protection Services
WRRS partnered with IDX to offer affected individuals free identity protection services, which include:
- Credit monitoring and dark web surveillance
- Up to $1 million in identity fraud loss reimbursement
- Fully managed identity-theft recovery assistance
Eligible members must enroll by January 20, 2026 by calling 1-833-687-1461 or visiting app.idx.us/account-creation/protect (Monday–Friday, 9 a.m.–9 p.m. ET).
Recommended Next Steps
- Enroll in the complimentary IDX services before the deadline.
- Review bank, retirement, and insurance statements for unauthorized activity.
- Consider placing a fraud alert or security freeze on credit files.
- Preserve your breach notice—proof of impact is often required in any future claim.
- Request a free case evaluation to learn whether you can participate in a data breach lawsuit or settlement.
Company Overview
Worcester Regional Retirement System administers retirement benefits for public employees in Worcester County, Massachusetts.
- Website: wrrboard.org
- Headquarters: Midstate Office Park, 23 Midstate Dr., Suite 106, Auburn, MA, USA
- Industry: Public Employee Retirement System
Frequently Asked Questions
What happened at Worcester Regional Retirement System?
WRRS experienced a cyber-attack on June 10, 2025 that allowed an unauthorized party to access certain network files containing personal information.
Has Worcester Regional Retirement System fixed the security issue?
Yes. WRRS reports that it engaged cybersecurity experts, completed an investigation, and implemented additional safeguards designed to minimize the risk of a similar incident.
Is WRRS offering free credit monitoring?
Yes. Affected individuals can enroll in complimentary identity protection services through IDX, including credit and dark web monitoring.
Do I qualify for a Worcester Regional Retirement System data breach lawsuit?
If you received a notice dated October 20, 2025, you may be eligible to seek monetary relief for time spent and risks incurred. A data-privacy attorney can provide a free review.
How do I enroll with IDX?
Call 1-833-687-1461 or visit app.idx.us/account-creation/protect before January 20, 2026. Use the enrollment code in your mailed notice.