Step By Step Investigates Possible Data Breach Following Alleged Cyberattack Step By Step, a Pennsylvania-based nonprofit providing vocational, housing, and clinical support to individuals with disabilities and mental health conditions, is under investigation for a potential data breach. The suspected incident, reportedly carried out by the hacker group Storm, is believed to have occurred on October 2, 2026. Legal teams are examining whether a class action lawsuit can be filed on behalf of affected individuals, including current and former employees, clients, and their families. While details about the breach’s scope and nature remain unconfirmed, attorneys are seeking input from those who may have had their personal information exposed. Cybersecurity monitoring site Ransomware.live first reported Storm’s claim of responsibility for the attack. As of October 5, 2026, no official confirmation or additional details about the breach have been released by Step By Step. The investigation remains ongoing.