DisclosureLens
UnknownDelayed DiscoveryCustomer Data InvolvedData ExfiltratedIdentity (basic)Financial accountFinancial credentialsMedium

United Steelworkers Local 286

bd_df9455cea46f7175 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 13, 2023

Filed

Apr 30, 2023

To disclose

11 weeks

Affected · nationwide

49,01919 in this filing

Linked

6 filings

Confidence

66%
Full breach record for United Steelworkers Local 286 →2 incidents on file

United Steelworkers Local 286 reported a data breach that occurred on June 16, 2022, and was discovered on February 13, 2023. The incident affected 49,019 individuals, compromising names and financial account or credit/debit card numbers along with their security codes or PINs. The organization began notifying affected individuals in writing on April 14, 2023, and offered 12 months of credit monitoring and identity theft protection services through Experian.

Maine clockDiscovered Feb 13, 2023 → Filed with AG Apr 30, 202376d ⏱ ME AG >30d11 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 242 days
discovery → filing · 11 weeks / 76 days

Jun 16, 2022

Begins

Feb 13, 2023

Discovered

Apr 30, 2023

Filed

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filing ↓up to 16d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
HHS OCRApr 14 · first
Vermont State AGApr 14 · first
Indiana State AGApr 14 · first
Montana State AG+16d
Maine State AG+16d · this page
New Hampshire State AG+25d

Pattern: first filing Apr 14 (PA), last May 9 (NH) — a 25-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.