HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTHighContained
UNITE HERE!
bd_2672717fc2d0cde0 · schema v1 · pii pii-v1
Full breach record for UNITE HERE! →UNITE HERE reported an external system breach (hacking) on October 20, 2023, discovered on the same date. The incident affected 791,273 individuals nationwide, including 103 Maine residents. Acquired data included names and financial account or credit/debit card numbers (with security codes/PINs). The organization provided written notification on February 23, 2024, and offered 12 months of credit monitoring, identity restoration, and $1,000,000 reimbursement insurance.
Maine clockDiscovered Oct 20, 2023 → Filed with AG Feb 23, 2024126d ✗ ME AG >90d18 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
A leak claim by inc_ransom about this victim predates this filing by 64 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_33e463526bc7668bNew Hampshire State AGfiled 2024-02-23Verified
- bd_ab749990d313fd0cCalifornia State AGfiled 2024-02-23Verified
- bd_c3a0ae0aa0e09f54Indiana State AGfiled 2024-02-23Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5aeae259-5615-4ba6-9108-ea36011727ee.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 23, 2024
- Raw hash
- a99f5f47fe6e40b5442cd47d1570a513d0843b91c896d5f66fc727c1fca943ca
Reporting entity
- Name
- UNITE HERE!norm: unite here
- Domain
- unitehere.org
Victim entity
- Name
- UNITE HERE!norm: unite here
- Domain
- unitehere.org
Incident
- Discovered
- Oct 20, 2023
- Materiality determined
- —
- Notification sent
- Feb 23, 2024
- Affected individuals
- 791,273
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 18 weeks(126 days from discovery to filing)
- Compliance flags
- ME AG >90d · 126dME resident >60d · 126dLeak >30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 20, 2023→ Filed with AG: Feb 23, 2024126d 90 days ME AG >90d Maine Discovered: Oct 20, 2023→ Notified: Feb 23, 2024126d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.