HackingFinancial ServicesProfessional ServicesFinanceSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDMediumContained

Plumbers & Fitters Local Union 295 Health & Welfare Fund

bd_2a5d977ada23842a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 4, 2023

Filed

Jan 3, 2024

To disclose

9 weeks

Affected

5state residents only

Confidence

66%

Full breach record for Plumbers & Fitters Local Union 295 Health & Welfare Fund →

Plumbers & Fitters Local Union 295 Health & Welfare Fund notified Montana residents of a third-party data breach involving former benefits provider Rightway Healthcare. Unauthorized access occurred on September 23, 2023, exposing names and Social Security numbers. The Fund discovered the incident on November 4, 2023, and sent notifications on December 29, 2023, offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 42 days

discovery → filing · 9 weeks / 60 days

Sep 23, 2023

Begins

Nov 4, 2023

Discovered

Jan 3, 2024

Filed

vs. sector median

1 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5 affectedView incident

Name: Plumbers & Fitters Local Union 295 Health & Welfare Fund
norm: plumbers fitters local union 295 health welfare

Name: Plumbers & Fitters Local Union 295 Health & Welfare Fund
norm: plumbers fitters local union 295 health welfare
Industry: Financial ServicesllmProfessional Servicesllm

Discovered: Nov 4, 2023
Breach occurred: Sep 23, 2023
Undetected for: 42 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 29, 2023
Affected individuals: 5state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: External
Third party: via Rightway Healthcare
Initial access: supply_chain

During the incident: Arranged to provide notification to all potentially affected individuals
Arranged to provide access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance through Cyberscout through Identity Force, a TransUnion company
Changes made: Rightway deleted the data involved in the incident
Rightway searched the dark web and did not identify any evidence that the potentially affected information has been publicly posted or disclosed
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(60 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1001.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 3, 2024
Raw hash: be736018a21eb15d08f94ac1796c37da679012c5447d8bb541ac9bbd765e57fa

Reporting entityPlumbers & Fitters Local Union 295 Health & Welfare Fund

Victim entityPlumbers & Fitters Local Union 295 Health & Welfare Fund

Incidentdiscovered Nov 4, 2023

Stated responseArranged to provide notification to all potentially affected individuals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov