HackingFinancial ServicesFinanceCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHighContained

North Atlantic States Carpenters Benefit Funds

bd_26ca88c6d91bab3e · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 18, 2025

Filed

Feb 11, 2026

To disclose

25 weeks

Affected

7,444state residents only

Linked

8 filings

Confidence

66%

Full breach record for North Atlantic States Carpenters Benefit Funds →2 incidents on file

North Atlantic States Carpenters Benefit Funds (NASCBF) notified the NH Attorney General of an unauthorized access incident affecting 7,444 New Hampshire residents. On August 18, 2025, NASCBF observed suspicious activity in its CT office network. An investigation confirmed an unauthorized actor accessed files containing names, SSNs, taxpayer IDs, and financial account information. NASCBF reset passwords, engaged forensic specialists, and notified law enforcement. The review of affected files concluded on January 13, 2026. NASCBF is offering 12 months of credit monitoring via Epiq and notifying HHS under HIPAA.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 25 weeks / 177 days

Aug 18, 2025

Begins

Aug 18, 2025

Discovered

Feb 11, 2026

Filed

vs. sector median

+16 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Nebraska State AGbd_1198fed05a9c25042026-02-11Verified
Massachusetts State AGbd_38e06e77f795fddf2026-02-11Verified
Maine State AGbd_7d0152cd19d54aa82026-02-11Candidate
Indiana State AGbd_aa7d90f26edd47022026-02-11Verified by operator

Show 3 more filings ↓up to 10d gap

Vermont State AGbd_ef203187ce86e64f2026-02-11Verified
Texas State AGbd_823e1bfd6c35b5bf2026-02-13 · +2dVerified
Illinois State AGbd_df2c9961bef38f092026-02-01 · +10dVerified

Name: North Atlantic States Carpenters Benefit Funds
norm: north atlantic states carpenters benefit funds
Domain: carpentersfund.org

Name: North Atlantic States Carpenters Benefit Funds
norm: north atlantic states carpenters benefit funds
Domain: carpentersfund.org
Industry: Financial Servicesllm

Discovered: Aug 18, 2025
Breach occurred: Aug 18, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 11, 2026
Affected individuals: 7,444state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notifying the U.S. Department of Health and Human Services and prominent media pursuant to the Health Insurance Portability and Accountability Act (HIPAA)Providing written notice of this incident to relevant state and federal regulators, as necessary

During the incident: Reset passwords
Took measures to limit the impact of the incident
Started a forensic investigation with the assistance of third-party specialists
Notified federal law enforcement regarding the event
Providing access to credit monitoring services for twelve (12) months, through Epiq, to individuals whose personal information was potentially affected by this incident, at no cost to these individuals
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Changes made: Reviewing the protocols, policies, and procedures to reduce the likelihood of a similar event occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(177 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Illinois State AGFeb 1 · first

Nebraska State AG+10d

Massachusetts State AG+10d

Maine State AG+10d

Indiana State AG+10d

Vermont State AG+10d

New Hampshire State AG+10d · this page

Texas State AG+12d

Pattern: first filing Feb 1 (IL), last Feb 13 (TX) — a 12-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/north-atlantic-states-carpenters-benefit-funds-20260211.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 11, 2026
Raw hash: 52f31bef829d0ff4c7a97b76da353d0af21b185c710f151b2a078dfd700b773d

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityNorth Atlantic States Carpenters Benefit Funds

Victim entityNorth Atlantic States Carpenters Benefit Funds

Incidentdiscovered Aug 18, 2025

Stated responseReset passwords

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov