DisclosureLens
HackingCustomer Data InvolvedPIIGovernment IDIdentity (basic)Critical

SEIU 775 Benefits Group

bd_4eed9e5d08f4316e · schema v1 · pii pii-v1

Severity

Critical

Discovered

Apr 4, 2021

Filed

May 5, 2021

To disclose

4 weeks

Affected · nationwide

140,00028 in this filing

Linked

8 filings

Confidence

50%
Full breach record for SEIU 775 Benefits Group →2 incidents on file

SEIU 775 Benefits Group, a non-profit organization, experienced an external system breach (hacking) on April 4, 2021. The breach was discovered on the same day. The incident affected 140,000 individuals, including 28 Maine residents. The compromised information included names in combination with Social Security Numbers. Affected individuals were notified on May 10, 2021, and offered one year of identity theft protection services through Kroll.

Maine clockDiscovered Apr 4, 2021 → Filed with AG May 5, 202131d ⏱ ME AG >30d4 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 4 weeks / 31 days

Apr 4, 2021

Begins

Apr 4, 2021

Discovered

May 5, 2021

Filed

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Show 3 more filings ↓up to 5d gap

Filing propagation · 8 filings · 8 states

View merged incident ↗
Montana State AGMay 5 · first
New Hampshire State AGMay 5 · first
Washington State AGMay 5 · first
Maine State AGMay 5 · first · this page
California State AG+2d
Indiana State AG+5d
Massachusetts State AG+5d
Oregon State AG+5d

Pattern: first filing May 5 (MT), last May 10 (OR) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.