Service Employees International Union, Local 32BJ - October 2021 and November 2021

Service Employees International Union, Local 32BJ, is a union system headquartered in New York, New York. It mainly represents building workers in ten states and has about 150,000 members across the country.

What Was the Breach?

The breach was unauthorized access to 32BJ’s internal systems. In its statement to the Office of the Vermont Attorney General, the union only described the breach as “a data security incident.”

How Did the Breach Occur?

The breach most likely occurred via a phishing scheme, as most violations do. 32BJ’s notice stated that “Through the investigation, we learned that an unauthorized actor accessed certain files and folders within the 32BJ system and may have viewed or acquired data concerning certain member information between October 21, 2021 until November 1, 2021.”

When Did This Breach Occur?

This breach occurred between October 21, 2021, and November 1, 2021.

Who Does the Breach Impact?

The breach impacts a select number of 32BJ members. “After determining the scope of information in the impacted files,” read the notice, “we undertook efforts to locate address information for the affected individuals, put resources in place, and provide this direct notice.”

How Many Files Does the Breach Affect?

The notice sent by the union did not include an exact number of how many individuals or files were affected. However, the union did offer twelve to twenty-four months of free credit monitoring, depending on the individual.