HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
United Food & Commercial Workers Local No. 7
bd_a7107a506251196c · schema v1 · pii pii-v1
Full breach record for United Food & Commercial Workers Local No. 7 →UFCW Local No. 7, a non-profit union in Wheat Ridge, CO, experienced an external network breach on Dec 10, 2024. An unauthorized actor may have accessed files containing names and Social Security numbers. 55,747 total individuals affected; 28 Maine residents. Breach confirmed Aug 21, 2025 after investigation. Notifications sent Sep 22, 2025. 12-month credit monitoring offered via Cyberscout/TransUnion.
Maine clockDiscovered Aug 21, 2025 → Filed with AG Sep 22, 202532d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed28 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/43f960b1-a152-423e-a00e-13f50687bee9.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 22, 2025
- Raw hash
- 66db06b79cd94299c3672e3178e2c2363738cd3ec760bb11bea0af7f5e8e2fa1
Reporting entity
- Name
- United Food & Commercial Workers Local No. 7norm: united food commercial workers local no 7
- Industry
- Non-Profit
Victim entity
- Name
- United Food & Commercial Workers Local No. 7norm: united food commercial workers local no 7
- Industry
- Non-Profit
Incident
- Discovered
- Aug 21, 2025
- Materiality determined
- Aug 21, 2025
- Notification sent
- Sep 22, 2025
- Affected individuals
- 28
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney GeneralNotified local and federal law enforcement
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- ME AG >30d · 32d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 21, 2025→ Filed with AG: Sep 22, 202532d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.