Social EngineeringIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
IAM Union
bd_210502e052cd3fd0 · schema v1 · pii pii-v1
Full breach record for IAM Union →IAM National Pension Fund notified the NH Attorney General of a phishing incident affecting one NH resident. Unauthorized access to an employee's email occurred between Sept 28 and Oct 15, 2020. Participant names and SSNs were exposed. The Fund reset passwords, offered 1-year Experian credit monitoring, and provided employee phishing training. Notification sent Aug 4, 2021.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/holyoke-gas-electric-20210806.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 6, 2021
- Raw hash
- 8dca503b97e463b024e198b948c712bef4ba8d765b63e2ccb1af5788a44c3622
Reporting entity
- Name
- IAM Unionnorm: iam union
- Domain
- goiam.org
Victim entity
- Name
- IAM Unionnorm: iam union
- Domain
- goiam.org
Incident
- Discovered
- Feb 9, 2021
- Materiality determined
- —
- Notification sent
- Aug 4, 2021
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 25 weeks(178 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.