HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHighContained
USW Local 286
bd_c11fd612d57709c0 · schema v1 · pii pii-v1
Full breach record for USW Local 286 →United Steelworkers Union Local 286 notified the Delaware Attorney General of a data breach affecting 37,965 individuals. An unauthorized party accessed an employee's email account between June 16, 2022, and July 18, 2022, exposing names, SSNs, DOBs, driver's licenses, and financial account numbers. The breach was discovered on February 13, 2023, following a forensic investigation.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed37,965 affectedView incident
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2023/05/USW-Local-286-Consumer-Letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 14, 2023
- Raw hash
- b9a8d4e55f4b6491f1d62df5cdc5070b4fa0ca8c8f06486b6825d1b002d219d1
Reporting entity
- Name
- USW Local 286norm: usw local 286
- Domain
- usw286.org
Victim entity
- Name
- USW Local 286norm: usw local 286
- Domain
- usw286.org
Incident
- Discovered
- Feb 13, 2023
- Materiality determined
- —
- Notification sent
- Apr 14, 2023
- Affected individuals
- 37,965
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Delaware Attorney GeneralNotified HHS OCR
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.