HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
TWU Local 100
bd_c859070a609e7efb · schema v1 · pii pii-v1
Full breach record for TWU Local 100 →Transport Workers Union Local 100 notified the New Hampshire Attorney General of a data breach occurring between January 29 and February 3, 2026. An unauthorized third party accessed and exfiltrated files containing personal information (name, address, DOB, SSN, health insurance ID) of 5 New Hampshire residents. The breach was discovered on April 15, 2026. The union retained forensic experts, notified law enforcement, and is providing 24 months of identity monitoring to affected individuals.
Leak gap clock⏱ Leak >30d9 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
A leak claim by qilin about this victim predates this filing by 80 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_cffcb48ce7af01f3Leak Siteqilinfiled 2026-02-23(59d gap)Verified
- bd_4cde0d138cbb2a22Leak Siteqilinfiled 2026-02-03(80d gap)Verified by operator
Regulatory filings (3) · sorted by filing gap
- bd_02a456927aea0129Indiana State AGfiled 2026-04-24Verified by operator
- bd_36f2deae02d39a28Indiana State AGfiled 2026-04-24Verified
- bd_972f7a479631d755Vermont State AGfiled 2026-04-24Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/transport-workers-union-local-100-20260424.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 24, 2026
- Raw hash
- 9755286a83bf7f6e1366078c4bbe571746a6742647bcf7c877762d505255779c
Reporting entity
- Name
- TWU Local 100norm: twu local 100
- Domain
- twulocal100.org
Victim entity
- Name
- TWU Local 100norm: twu local 100
- Domain
- twulocal100.org
Incident
- Discovered
- Apr 15, 2026
- Materiality determined
- —
- Notification sent
- Apr 24, 2026
- Affected individuals
- 5
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Department of Justice / Office of the Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 days(9 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.