HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
The United Food & Commercial Workers International Union
bd_4fe4b11b457ac1e6 · schema v1 · pii pii-v1
Full breach record for The United Food & Commercial Workers International Union →United Food & Commercial Workers Local No. 7 notified members of a data privacy incident where unauthorized access occurred on December 10, 2024, and was discovered on December 11, 2024. The incident involved the exposure of first and last names and Social Security numbers. The organization secured its network, engaged cyber incident response professionals, and notified law enforcement. Affected individuals are offered 12 months of complimentary credit monitoring and identity protection services.
California clockDiscovered Dec 11, 2024 → Notified Sep 22, 2025285d ✗ CA 60-day late50 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_93b60026c40b5e9bVermont State AGfiled 2025-11-24Verified
- bd_af51d76f7a9d0482New Hampshire State AGfiled 2025-11-24Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-614746
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 24, 2025
- Raw hash
- dd7d5466ce612d3ce0b10e85343330bcab4896625ee10871ea18ca313e09266c
Reporting entity
- Name
- The United Food & Commercial Workers International Unionnorm: the united food commercial workers international union
- Domain
- ufcw.org
Victim entity
- Name
- The United Food & Commercial Workers International Unionnorm: the united food commercial workers international union
- Domain
- ufcw.org
Incident
- Discovered
- Dec 11, 2024
- Materiality determined
- —
- Notification sent
- Sep 22, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unknown
- Threat actor
- External
- Regulator citations
- Notified both local federal law enforcement of this incident
Compliance
- Time to disclose
- 50 weeks(348 days from discovery to filing)
- Compliance flags
- CA 60-day late · 285d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 11, 2024→ Notified: Sep 22, 2025285d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.