HackingFinancial ServicesGovernmentFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

Worcester Regional Retirement System

bd_2eb6868d68a3d554 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 10, 2025

Filed

Oct 20, 2025

To disclose

19 weeks

Affected

4state residents only

Linked

6 filings

Confidence

66%

Full breach record for Worcester Regional Retirement System →

Worcester Regional Retirement System notified affected individuals of a data security incident discovered on June 10, 2025. Unauthorized access to personal information, including SSNs, driver's licenses, and medical/insurance data, was confirmed in September 2025. The organization engaged cybersecurity experts and is offering complimentary identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 19 weeks / 132 days

Jun 10, 2025

Begins

Jun 10, 2025

Discovered

Oct 20, 2025

Filed

vs. sector median

+11 wks slower

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_08e43682a5aefe872025-10-20Verified
Indiana State AGbd_8e4dd1e853edbf292025-10-20Verified
Maine State AGbd_b885d97d39d20eb02025-10-20Verified by operator
New Hampshire State AGbd_bfa136abfa8226502025-10-20Verified

Show 1 more filing ↓

Nebraska State AGbd_c047a5e7d86bc8752025-10-20Verified

Name: Worcester Regional Retirement System
norm: worcester regional retirement system

Name: Worcester Regional Retirement System
norm: worcester regional retirement system
Industry: Financial ServicesllmGovernmentllm

Discovered: Jun 10, 2025
Breach occurred: Jun 10, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 20, 2025
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Data elements: Medical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Engaged independent cybersecurity experts to assist with the process
Offering complimentary identity protection services through IDX
Implemented measures to enhance security and minimize the risk of a similar incident occurring in the future
Changes made: Implemented measures to enhance security and minimize the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(132 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Massachusetts State AGOct 20 · first

Indiana State AGOct 20 · first

Maine State AGOct 20 · first

New Hampshire State AGOct 20 · first

Nebraska State AGOct 20 · first

Montana State AGOct 20 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/10/Consumer-notification-letter-26.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 20, 2025
Raw hash: ef720ee222b2ab977b397a7325a22a9cc031247d2c0f9ebb9832b97a90de0d2d

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityWorcester Regional Retirement System

Victim entityWorcester Regional Retirement System

Incidentdiscovered Jun 10, 2025

Stated responseEngaged independent cybersecurity experts to assist with the process

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov