HackingStolen CredentialsCustomer Data InvolvedData ExfiltratedPIIIDENTITY_BASICLowContained
UNITE HERE!
bd_33e463526bc7668b · schema v1 · pii pii-v1
Full breach record for UNITE HERE! →UNITE HERE notified New Hampshire residents of a data breach occurring on October 20, 2023. An unauthorized third party accessed systems containing personal information of members and staff. UNITE HERE engaged cyber specialists, reset passwords, increased security, and notified law enforcement. Credit monitoring services are offered to affected individuals.
Leak gap clock⏱ Leak >30d18 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
A leak claim by inc_ransom about this victim predates this filing by 64 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2672717fc2d0cde0Maine State AGfiled 2024-02-23Candidate
- bd_ab749990d313fd0cCalifornia State AGfiled 2024-02-23Verified
- bd_c3a0ae0aa0e09f54Indiana State AGfiled 2024-02-23Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/unite-here-20240223.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 23, 2024
- Raw hash
- d3b324cd58f8dee61d3943c898168ff038600af048837dae19e6548cfa4d37f9
Reporting entity
- Name
- UNITE HERE!norm: unite here
- Domain
- unitehere.org
Victim entity
- Name
- UNITE HERE!norm: unite here
- Domain
- unitehere.org
Incident
- Discovered
- Oct 20, 2023
- Materiality determined
- —
- Notification sent
- Feb 23, 2024
- Affected individuals
- 212
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified federal law enforcementProviding written notice to relevant state and federal regulatorsNotifying the three major credit reporting agenciesNotifying the U.S. Department of Health and Human Service
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 18 weeks(126 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.