Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedMulti-Stage ChainPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Sheet Metal Workers Local Union #83 Insurance Fund and Annuity Fund
bd_dcf188d339898e4a · schema v1 · pii pii-v1
Full breach record for Sheet Metal Workers Local Union #83 Insurance Fund and Annuity Fund →Sheet Metal Workers Local Union #83 Insurance Fund and Annuity Fund reported unauthorized access to an employee email account between March 18-26, 2024, following detection of unusual activity on March 25, 2024. The breach likely involved phishing and credential theft, exposing PII including names and addresses of approximately 7 New Hampshire residents. The organization notified the NH AG, changed passwords, and offered credit monitoring.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_d8c39b21d7501e60HHS OCRfiled 2024-07-03(13d gap)Verified
- bd_86366d3f0789adf4Vermont State AGfiled 2024-06-27(19d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/sheet-metal-workers-insurance-annuity-fund-20240716.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 16, 2024
- Raw hash
- 5689be97394995e24979e1245dbd0d91376cc5d904f62bc51f5ed54f36816820
Reporting entity
- Name
- Sheet Metal Workers Local Union #83 Insurance Fund and Annuity Fundnorm: sheet metal workers local union 83 insurance fund and annuity
Victim entity
- Name
- Sheet Metal Workers Local Union #83 Insurance Fund and Annuity Fundnorm: sheet metal workers local union 83 insurance fund and annuity
Incident
- Discovered
- Mar 25, 2024
- Materiality determined
- Jun 12, 2024
- Notification sent
- Jul 16, 2024
- Affected individuals
- 7
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Office of the Attorney General Consumer Protection Bureau
- Initial access
- phishing_link
Compliance
- Time to disclose
- 16 weeks(113 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.