Confirmed breach. Intrusion Oct 21, 2021–Nov 1, 2021, discovered Nov 1, 2021 — the first regulatory filing landed 102 days later. 10,624 individuals reported across the linked filings.
Discovery variance · Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster; needs two dated filings.
State AGConfirmedLifecycle stage 2 of 3: ConfirmedUnverified claimConfirmedEnforced
Affected (total reported)
10,624
Data types
—
Jurisdictions
3
DE MT NH
Linked filings
3
all State AG
Affected residents by state
per-filing reported counts
NH10,624
DE1,070
MT1
State AGs report only their own residents; bars show per-filing counts.
Timeline
Earliest sighting first · deep chronology in Litigation Timeline
Breach window
Oct 21, 2021
When the intrusion reportedly occurred, per the linked filings
Breach discovered
Nov 1, 2021
Reported by DELAWARE AG filing
102 days
3 State AG filingsFeb 11, 2022 – Feb 15, 2022ExpandCollapse
Service Employees International Union Local 32BJ reported a data breach to the Montana Attorney General. The breach was reported on 2022-02-11. The breach occurred from 10/21/2021 to 11/1/2021. 1 Montana residents were affected.
Affected (this filing):
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
1
💎Delaware State AGlinked via multistate filing link · 100%
Service Employees International Union, Local 32BJ notified Delaware residents that an unauthorized actor accessed its systems between October 21 and November 1, 2021, potentially viewing or acquiring data containing names, Social Security numbers, and financial account numbers. Approximately 1,070 Delaware residents were notified. 32BJ engaged cybersecurity experts, conducted a manual review, and provided 12 months of credit monitoring through Equifax. The incident status is contained.
Affected (this filing): 1,070
⛰️New Hampshire State AGlinked via multistate filing link · 100%
Service Employees International Union Local 32BJ notified the New Hampshire Attorney General on February 15, 2022, regarding a security breach affecting 10,624 individuals, including 70 New Hampshire residents. The incident involved unauthorized access to union member records containing personal and government-issued identification data. The union provided credit monitoring to affected individuals. A related class-action settlement of $550,000 was reported.