DisclosureLens
HackingOtherProfessional ServicesCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)MediumContained

Transport Workers Union Local 100

bd_b1c4e7ab687bca14 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Apr 24, 2026

To disclose

—

Affected

9state residents only

Linked

7 filings

Confidence

65%

Transport Workers Union Local 100 notified members of an unauthorized third-party intrusion on its systems between January 29, 2026, and February 3, 2026. The incident potentially exposed names, dates of birth, Social Security numbers, and health insurance subscriber IDs. The union engaged third-party experts, secured systems, and offered 24 months of identity theft protection via IDX. No misuse of data was reported at the time of notification.

Leak gap clock⏱ Leak >30d
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Jan 29, 2026

Begins

Apr 24, 2026

Filed

This filing is one of 7 about the same incident.View merged incident
A leak claim by qilin about this victim predates this filing by 80 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 4 states

View merged incident ↗
Indiana State AGApr 24 · first
Indiana State AGApr 24 · first
Vermont State AGApr 24 · first
New Hampshire State AGApr 24 · first
Massachusetts State AGApr 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.