The AFTRA Retirement Fund

AFTRA Retirement Fund filed a supplemental notice with the New Hampshire Attorney General regarding unauthorized access to its network occurring between October 24 and 28, 2019. The breach potentially affected the personal information (name, address, DOB, SSN) of approximately 612 New Hampshire residents. AFTRA engaged forensic experts, reviewed affected files, and provided one year of credit monitoring through Kroll to impacted individuals.

The AFTRA Retirement Fund reported a data breach affecting 599 Maine residents. The breach, which occurred between October 24, 2019, and October 28, 2019, was discovered on September 25, 2020. The incident was categorized as an external system breach (hacking) and resulted in the exposure of names and Social Security numbers. Affected individuals were notified on December 16, 2020, and offered 12 months of credit monitoring and identity protection services from Kroll.

AFTRA Retirement Fund notified Delaware AG of unauthorized network access occurring between Oct 24-28, 2019, detected Oct 28, 2019. Investigation by third-party forensic specialists confirmed potential access to files containing PII, government IDs, and financial account numbers. Notices were posted Feb 25, 2020. Remediation included security safeguards and 12 months of Kroll identity monitoring. Rhode Island resident count explicitly stated as 965.

AFTRA Retirement Fund notified South Carolina and Rhode Island residents of a data breach involving unauthorized access to network files between October 24 and 28, 2019. The incident involved potential access to personal information, including names and government IDs. AFTRA engaged forensic specialists, implemented additional security safeguards, and offered 12 months of complimentary identity monitoring through Kroll. The investigation was completed in September 2020.

AFTRA Retirement Fund notified the NH AG of unauthorized network access between Oct 24-28, 2019, discovered Oct 28, 2019. ~90 NH residents affected. Data potentially included names, SSNs, DOBs, financial info. Investigation ongoing with forensic experts. Notices mailed Feb 25, 2020; credit monitoring offered.

AFTRA Retirement Fund notified individuals of unauthorized access to its network between Oct 24-28, 2019. Suspicious activity detected Oct 28, 2019. Third-party forensic experts engaged. Data potentially exposed includes PII, government IDs, and financial account numbers. 12 months of Kroll identity monitoring offered. Regulators (HHS OCR, state AGs) to be notified.

Supplemental notice for AFTRA Retirement Fund regarding unauthorized access to files and folders between Oct 24-28, 2019. Discovered Oct 28, 2019. Affected data includes names, SSNs, DOBs, and addresses. Initial notice covered 573 WA residents; this supplemental notice covers an additional 8,230 WA residents. Credit monitoring provided.

AFTRA Retirement Fund reported a data breach to the Indiana Attorney General. The breach occurred on 2019-10-24 and was reported on 2020-02-25. 2,036 Indiana residents were affected. 57,207 individuals affected in total.

AFTRA Retirement Fund reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-02-25. 8,222 Massachusetts residents were affected. The report records the breach type as electronic.

AFTRA Retirement Fund notified individuals of unauthorized access to its network between October 24 and October 28, 2019. The incident was discovered on October 28, 2019. AFTRA acted as a business associate for the SAG-AFTRA Health Plan. Potentially affected data includes PHI and PII. The organization engaged forensic experts, reviewed affected files, and offered 12 months of identity monitoring.

AFTRA Retirement Fund, a Business Associate (NY), reported to HHS on 2020-02-25 a Hacking/IT Incident affecting 57,900 individuals. Breached information was located on a Network Server and included names, dates of birth, addresses, Social Security numbers, and claims and financial information. The BA implemented additional technical safeguards following the breach; OCR obtained assurances of corrective action.

AFTRA Retirement Fund reported a data breach to the Oregon Attorney General. The breach was reported on 2020-02-25. The breach occurred during 10/24/2019 - 10/28/2019. The breach was discovered on 10/28/2019. 57,207 individuals were affected. Notice was sent on 2/25/2020.

AFTRA RETIREMENT FUND filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-530). The register records the breach as discovered on February 25, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

AFTRA RETIREMENT FUND filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-083). The register records the breach as discovered on October 28, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.