HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
United Steelworkers Local 286
bd_7c8b1c28967aad75 · schema v1 · pii pii-v1
Full breach record for United Steelworkers Local 286 →United Steelworkers Local 286 notified consumers of a data breach involving personal information including names, addresses, Social Security numbers, dates of birth, financial account numbers, and health insurance details. The union offered one year of complimentary credit monitoring and provided guidance on fraud alerts and security freezes. The incident was reported to the Vermont Attorney General.
Vermont clock✓ VT AG ≤14 bday≤1 day discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-04-14-united-steelworkers-local-286-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 14, 2023
- Raw hash
- caf3fa48d3c4a8731eb40e08d3f557c5ff788a17db998d3f8d26536ea061ae6f
Reporting entity
- Name
- United Steelworkers Local 286norm: united steelworkers local 286
Victim entity
- Name
- United Steelworkers Local 286norm: united steelworkers local 286
Incident
- Discovered
- Apr 14, 2023
- Materiality determined
- —
- Notification sent
- Apr 14, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notice with the Office of the Vermont Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- ≤1 day(0 days from discovery to filing)
- Compliance flags
- VT AG ≤14 bday
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.