HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
UFCW Local 342
bd_a2d4d73e19193ad7 · schema v1 · pii pii-v1
Full breach record for UFCW Local 342 →UFCW Local 135, a labor union, reported a cybersecurity event to the Maryland Attorney General. The breach was discovered on August 23, 2024, involving unauthorized access to network data. The incident potentially compromised the names, dates of birth, addresses, and Social Security numbers of 32 Maryland residents. The union engaged a forensic firm, notified affected individuals, and offered credit monitoring services. This filing serves as a supplemental notice.
Leak gap clock✗ Leak >180d16 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed32 affectedView incident
A leak claim by cicada3301 about this victim predates this filing by 482 days.View originating leak claim
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376257%20%281%29.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 17, 2025
- Raw hash
- c9878236d4f06fa9738ed15841df83dd8ee128b5976361f03d74bee8625430d5
Reporting entity
- Name
- Wilson, Elser, Moskowitz, Edelman & Dicker LLPnorm: wilson elser moskowitz edelman dicker
Victim entity
- Name
- UFCW Local 342norm: ufcw local 342
- Domain
- ufcw135.com
Incident
- Discovered
- Aug 23, 2024
- Materiality determined
- —
- Notification sent
- Jan 28, 2025
- Affected individuals
- 32
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed Security Breach Notification with Maryland Office of the Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 16 months(481 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.