North Atlantic States Carpenters Benefit Funds

North Atlantic States Carpenters Benefit Funds based in Wilmington, Massachusetts, a financial services entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-01-13 and reported on 2026-02-13. 567 Texas residents were affected. 110,435 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Government-issued ID number (e.g. passport, state ID card);Financial Information (e.g. account number, credit or debit card number);Medical Information;Health Insurance Information. Consumers were notified via U.S. Mail;Broadcast on Texas-wide Media.

North Atlantic States Carpenters Benefit Funds (NASCBF) disclosed a data event affecting 26 Nebraska residents. On August 18, 2025, suspicious activity was observed in the Hamden, CT office network, leading to unauthorized access to files containing names and Social Security numbers. NASCBF reset passwords, engaged forensic specialists, notified law enforcement, and provided 12 months of credit monitoring. Notices were sent to affected individuals on February 11, 2026.

North Atlantic States Carpenters Benefit Funds (NASCBF) notified the NH Attorney General of an unauthorized access incident affecting 7,444 New Hampshire residents. On August 18, 2025, NASCBF observed suspicious activity in its CT office network. An investigation confirmed an unauthorized actor accessed files containing names, SSNs, taxpayer IDs, and financial account information. NASCBF reset passwords, engaged forensic specialists, and notified law enforcement. The review of affected files concluded on January 13, 2026. NASCBF is offering 12 months of credit monitoring via Epiq and notifying HHS under HIPAA.

North Atlantic States Carpenters Benefit Funds (NASCBF) notified individuals of a data event involving personal information. The organization launched an investigation, notified law enforcement, and is offering 24 months of credit monitoring through Epiq. No funds were taken, and benefits remain intact. The specific nature of the breach, dates, and number of affected individuals are not disclosed in this notice.

North Atlantic States Carpenters Benefit Funds (NASCBF) reported an external system breach (hacking) on August 18, 2025, affecting 2,063 Maine residents. The incident involved unauthorized access to files containing names, SSNs, and financial account information. NASCBF reset passwords, engaged forensic specialists, notified law enforcement, and provided 12 months of credit monitoring through Epiq.

North Atlantic States Carpenters Benefit Funds reported a data breach to the Indiana Attorney General. The breach occurred on 2025-08-18 and was reported on 2026-02-11. 149 Indiana residents were affected. 110,435 individuals affected in total.

North Atlantic States Carpenters Benefit Funds (NASCBF) notified consumers that an unauthorized actor accessed and/or acquired certain files on the systems of its Connecticut office on August 18, 2025. The incident was discovered on the same date. Affected data may include names and Social Security numbers. NASCBF reset passwords, engaged third-party forensic specialists, notified law enforcement, and is offering credit monitoring. No evidence of identity theft or fraud has been found.

NORTH ATLANTIC STATES CARPENTERS BENEFIT FUNDS filed a data-breach notice with the Illinois Attorney General in February 2026 (case 26-02-946). The register records the breach as discovered on January 13, 2026. Personal information types reported: financial account number, medical information, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Carpenters Benefit Funds of Philadelphia notified Montana residents of a phishing attack targeting employees between April 23 and May 3, 2018. The incident was discovered on July 17, 2018, after forensic review revealed access to emails containing names, SSNs, and health insurance info. No evidence of misuse was found. The company engaged external cybersecurity professionals and offered one year of Experian IdentityWorks credit monitoring.