HackingStolen CredentialsCustomer Data InvolvedPIIIDENTITY_BASICLowContained
International Association of Sheet Metal Air Rail Transportation Workers
bd_c55d51cf387730be · schema v1 · pii pii-v1
Full breach record for International Association of Sheet Metal Air Rail Transportation Workers →The International Association of Sheet Metal Air Rail Transportation Workers (SMART) disclosed a data breach discovered on September 9, 2023, involving unauthorized access to member data. SMART notified the FBI and engaged Kroll to provide 12 months of complimentary credit monitoring and identity protection services to affected individuals.
Vermont clock⏱ VT AG >14 bday9 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_4535c6f4b605aed3California State AGfiled 2023-11-10Verified
- bd_7f53ea7c83a2af4dMaine State AGfiled 2023-11-10Candidate
- bd_dad8928dfa0b59d4Montana State AGfiled 2023-11-10Verified
- bd_58c945f0f74aad77Oregon State AGfiled 2023-11-13(3d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-11-10-international-association-sheet-metal-air-rail-transportation-workers-data-breach-notice
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 10, 2023
- Raw hash
- 20ecd81ef572ef5b37eaaba173578181643331955a3f7f008cdb5f26c6ce66f9
Reporting entity
- Name
- International Association of Sheet Metal Air Rail Transportation Workersnorm: international association of sheet metal air rail transportation workers
Victim entity
- Name
- International Association of Sheet Metal Air Rail Transportation Workersnorm: international association of sheet metal air rail transportation workers
Incident
- Discovered
- Sep 9, 2023
- Materiality determined
- Nov 10, 2023
- Notification sent
- Nov 10, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified the Federal Bureau of Investigation
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 9 weeks(62 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.