UFCW Local 655 Food Employers Pension Plan
bd_69c7c4c80ba0ab9b · schema v1 · pii pii-v1
Full breach record for UFCW Local 655 Food Employers Pension Plan →UFCW Local 655 Food Employers Joint Pension Plan reported a ransomware attack to the New Hampshire Attorney General on November 9, 2016. Unauthorized access to the plan's server occurred on July 14, 2016, followed by a ransomware attack on July 21, 2016. While forensic investigation found no evidence of data acquisition, the plan could not rule it out. The incident potentially affected 42 New Hampshire residents, exposing names, dates of birth, Social Security numbers, and bank account information. The plan offered one year of credit monitoring and identity restoration services through Kroll to affected individuals.
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_219edff0f57142f7California State AGfiled 2016-11-09Verified
- bd_50ec984949acceeaWashington State AGfiled 2016-11-09Candidate
- bd_70ce4bca427f9506Oregon State AGfiled 2016-11-09Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/ufcw-local-655-20161109.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 9, 2016
- Raw hash
- 17997d29b7905871c2aab95018b2341c212132f298489c4e57174c48a52cdf14
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- UFCW Local 655 Food Employers Pension Plannorm: ufcw local 655 food employers pension plan
Incident
- Discovered
- Jul 21, 2016
- Materiality determined
- —
- Notification sent
- Nov 9, 2016
- Affected individuals
- 42
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Providing notice of this incident to your office (New Hampshire Attorney General)providing notice of this incident to other regulators and consumer reporting agencies where required
Compliance
- Time to disclose
- 16 weeks(111 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.