UNITE HERE!
bd_e2a60319126426f7 · schema v1 · pii pii-v1
Full breach record for UNITE HERE! →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group INC Ransom on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
UNITE HERE is a labor union in the United States and Canada with roughly 300,000 active members. The union's members work predominantly in the hotel, food service, laundry, warehouse, and casino...
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Dec 20, 2023
Claim posted
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Siteinc_ransombd_17ad976435ab97472024-04-22 · +123dVerified by operator
Regulatory filings (9) · sorted by filing gap
- Maine State AGbd_2672717fc2d0cde02024-02-23 · +64dVerified by operator
- New Hampshire State AGbd_33e463526bc7668b2024-02-23 · +64dVerified by operator
- Montana State AGbd_35efb62d46022cd62024-02-23 · +64dVerified
- Oregon State AGbd_3729b8bde4d31e492024-02-23 · +64dVerified by operator
Show 5 more filings ↓Show fewer ↑up to 64d gap
- Washington State AGbd_660977128cd7563d2024-02-23 · +64dVerified
- Vermont State AGbd_6d375ec8e2c269cf2024-02-23 · +64dVerified by operator
- Massachusetts State AGbd_a3d01db5513ffe8e2024-02-23 · +64dVerified by operator
- California State AGbd_ab749990d313fd0c2024-02-23 · +64dVerified by operator
- Indiana State AGbd_c3a0ae0aa0e09f542024-02-23 · +64dVerified by operator
Showing first 10 of 12 linked disclosures.
Filing propagation · 9 filings · 9 states
View merged incident ↗Cascade drawn from the first 10 linked disclosures of 12 — the full spread may be wider.
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.