Labor Union UNITE HERE Facing Class Action Over Data Breach Affecting 791K People [UPDATE]

New to ClassAction.org? Read our Newswire Disclaimer

UNITE HERE faces a proposed class action after an October 2023 cyberattack compromised the personal data of more than 791,000 current and former union members.

Did you receive a data breach letter from UNITE HERE? Let us know here.

The 51-page data breach lawsuit relays that the New York-based labor union discovered suspicious activity on parts of its network on October 20, 2023. According to the UNITE HERE notice letter, an investigation revealed that an unauthorized third party had gained access to the union’s systems, which contained private information belonging to members and staff from certain local unions, health funds and the San Diego UNITE HERE Pension Fund.

Per the suit, the data exposed in the breach included individuals’ names, Social Security numbers, dates of birth and medical information.

The case contends that despite the increase in cyberattacks in recent years, UNITE HERE failed to properly monitor its computer network and implement adequate data security measures to safeguard the information in its care.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

To make matters worse, although the union purports to have learned of the incident in October of last year, it waited until late February 2024 to begin notifying victims, the complaint charges.

“As a result of this delayed response, [the plaintiff] and Class Members had no idea for four months that their Private Information had been compromised, and that they were, and continue to be, at significant risk of identity theft and various other forms of personal, social, and financial harm,” the filing says. “The risk will remain for their respective lifetimes.”

The plaintiff, a union member who resides in Washington, received notice in late February of this year informing her that her personal data had been compromised in the breach, the suit shares. Like other victims, the woman will now have to closely monitor her financial accounts and likely pay significant out-of-pocket costs to protect herself from fraud and identity theft, the case asserts.

The lawsuit looks to represent anyone in the United States whose private information was accessed and/or acquired as a result of the UNITE HERE data breach, including those who were sent notice of the incident.

Did you receive a data breach letter from UNITE HERE? Let us know here.