Social EngineeringPhishingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Sheet Metal Workers Local Union #83 Insurance Fund and Annuity Fund
bd_86366d3f0789adf4 · schema v1 · pii pii-v1
Full breach record for Sheet Metal Workers Local Union #83 Insurance Fund and Annuity Fund →Sheet Metal Workers Local Union #83 Insurance Fund and Annuity Fund notified consumers of a phishing incident compromising an employee email account between March 18-26, 2024. The breach exposed names and financial account numbers. The organization changed passwords, reviewed policies, and offered 12 months of credit monitoring.
Vermont clock✗ VT AG >45 bday13 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_d8c39b21d7501e60HHS OCRfiled 2024-07-03(6d gap)Verified
- bd_dcf188d339898e4aNew Hampshire State AGfiled 2024-07-16(19d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-06-27-sheet-metal-workers-local-union-83-insurance-fund-and-annuity-fund-data-breach-notice
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 27, 2024
- Raw hash
- 976a24d72920a35fd796f71f851187de0ca7c3ddd7ff91caef4fef6f09beecc4
Reporting entity
- Name
- Sheet Metal Workers Local Union #83 Insurance Fund and Annuity Fundnorm: sheet metal workers local union 83 insurance fund and annuity
Victim entity
- Name
- Sheet Metal Workers Local Union #83 Insurance Fund and Annuity Fundnorm: sheet metal workers local union 83 insurance fund and annuity
Incident
- Discovered
- Mar 25, 2024
- Materiality determined
- Jun 27, 2024
- Notification sent
- Jun 27, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 13 weeks(94 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.