Service Employees International Union, Local 32BJ, is a union system headquartered in New York, New York. It mainly represents building workers in ten states and has about 150,000 members across the country.
The breach was unauthorized access to 32BJ’s internal systems. In its statement to the Office of the Vermont Attorney General, the union only described the breach as “a data security incident.”
The breach most likely occurred via a phishing scheme, as most violations do. 32BJ’s notice stated that “Through the investigation, we learned that an unauthorized actor accessed certain files and folders within the 32BJ system and may have viewed or acquired data concerning certain member information between October 21, 2021 until November 1, 2021.”
This breach occurred between October 21, 2021, and November 1, 2021.
The breach impacts a select number of 32BJ members. “After determining the scope of information in the impacted files,” read the notice, “we undertook efforts to locate address information for the affected individuals, put resources in place, and provide this direct notice.”
The notice sent by the union did not include an exact number of how many individuals or files were affected. However, the union did offer twelve to twenty-four months of free credit monitoring, depending on the individual.