MalwareFinancial ServicesFinanceRansomwareData EncryptedCustomer Data InvolvedPIIIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

Laborers Local No. 754 Joint Benefit Funds

bd_57af9f2e2f73a154 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 10, 2023

Filed

May 22, 2024

To disclose

32 weeks

Affected

7state residents only

Linked

4 filings

Confidence

66%

Full breach record for Laborers Local No. 754 Joint Benefit Funds →

Laborers Local No. 754 Joint Benefit Funds experienced malicious encryption (ransomware) on servers on October 10, 2023. The forensic investigation found no evidence of unauthorized access or exfiltration of participant data, but notice was sent out of an abundance of caution to 7 New Hampshire residents. The organization engaged third-party cybersecurity specialists, notified federal law enforcement, and is providing credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 32 weeks / 225 days

Oct 10, 2023

Begins

Oct 10, 2023

Discovered

May 22, 2024

Filed

vs. sector median

+24 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_0803aea188f3af8f2024-05-22Candidate
Massachusetts State AGbd_71da9a02451598102024-05-22Verified
Vermont State AGbd_8ea8673425e5feca2024-05-22Verified

Name: Laborers Local No. 754 Joint Benefit Funds
norm: laborers local no 754 joint benefit funds

Name: Laborers Local No. 754 Joint Benefit Funds
norm: laborers local no 754 joint benefit funds
Industry: Financial Servicesllm

Discovered: Oct 10, 2023
Breach occurred: Oct 10, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 22, 2024
Affected individuals: 7state-resident count only
Data types: PIIIdentity (basic)Government IDFinancial accountHealth (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External
Regulator citations: Notified federal law enforcement regarding the eventProviding notice of this incident to relevant state and federal regulators, as necessary

During the incident: Worked to secure our systems
Began an investigation with the assistance of third-party cybersecurity specialists
Notified federal law enforcement regarding the event
Providing access to credit monitoring services for individuals whose personal information was potentially affected by this incident, at no cost to these individuals
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing individuals with information on how to place a fraud alert and security freeze on one’s credit file
Providing notice of this incident to relevant state and federal regulators, as necessary, and to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Changes made: Working to implement additional safeguards and training to its employees
Reviewed and updated existing policies and procedures relating to data protection and security
Implemented additional security measures designed to mitigate risk and to limit the likelihood of future similar incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 32 weeks(225 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGMay 22 · first

Massachusetts State AGMay 22 · first

Vermont State AGMay 22 · first

New Hampshire State AGMay 22 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/laborers-local-no-754-joint-benefit-funds-20240522.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 22, 2024
Raw hash: d9ebca501979018d4811a0bffdbc86696c8a351b1261f104587db153917c6d2d

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityLaborers Local No. 754 Joint Benefit Funds

Victim entityLaborers Local No. 754 Joint Benefit Funds

Incidentdiscovered Oct 10, 2023

Stated responseWorked to secure our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov