HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

UFCW Local 342

bd_c3274ad7ef7ceed4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 28, 2025

Filed

Mar 23, 2026

To disclose

47 weeks

Affected

15state residents only

Linked

7 filings

Confidence

66%

Full breach record for UFCW Local 342 →

UFCW Local 342 filed a supplemental notification with the New Hampshire Attorney General regarding unauthorized network access occurring between April 25-28, 2025. The incident potentially affected 15 New Hampshire residents, exposing personal, medical, and financial data. The organization secured its network, engaged external cybersecurity professionals, and provided credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

discovery → filing · 47 weeks / 329 days

Apr 25, 2025

Begins

Apr 28, 2025

Discovered

Mar 23, 2026

Filed

vs. sector median

+29 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Vermont State AGbd_888210155d105cb82026-03-20 · +3dVerified
New Hampshire State AGbd_6ea988412523a11e2026-03-12 · +11dVerified
Maine State AGbd_0c572b7d8d06b3322026-03-09 · +14dVerified
Nebraska State AGbd_0e00267dd122da722026-03-09 · +14dVerified

Show 2 more filings ↓up to 14d gap

Massachusetts State AGbd_55741d3a821207142026-03-09 · +14dCandidate
Nebraska State AGbd_8a3588bf96629d242026-03-09 · +14dVerified

Name: MCDONALD HOPKINS LLC
norm: mcdonald hopkins

Name: UFCW Local 342
norm: ufcw local 342
Domain: local342update.com
Industry: Professional Servicesllm

Discovered: Apr 28, 2025
Breach occurred: Apr 25, 2025 – Apr 28, 2025
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 9, 2026
Affected individuals: 15state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: External
Regulator citations: submitted notification to Office of the Attorney General Consumer Protection Bureau
Initial access: exploit_public_facing

During the incident: Secured our network
Reported the incident to law enforcement
Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals
Provided the affected residents with written notification
Provided a complimentary one-year membership with a credit monitoring service
Changes made: Continually evaluates and modifies its practices to enhance the security and privacy of the personal information it maintains
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 47 weeks(329 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

Maine State AGMar 9 · first

Nebraska State AGMar 9 · first

Massachusetts State AGMar 9 · first

Nebraska State AGMar 9 · first

New Hampshire State AG+3d

Vermont State AG+11d

New Hampshire State AG+14d · this page

Pattern: first filing Mar 9 (ME), last Mar 23 (NH) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ufcw-local-342-20260323.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 23, 2026
Raw hash: f9d521ddb756590b9fa9e5eb4ab4c7817fe98414030d48b314ef678c81ea6096

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityMCDONALD HOPKINS LLC

Victim entityUFCW Local 342

Incidentdiscovered Apr 28, 2025

Stated responseSecured our network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov