UNITE HERE, a New York-based labour union representing over 300,000 workers, experienced a severe data breach affecting nearly 800,000 individuals across various industries. The breach exposed sensitive personal information, including names, financial account details, and passwords. In response, the union promptly took its systems offline, initiated an investigation with cybersecurity experts, and notified law enforcement. While there’s no evidence of misuse, the potential remains, prompting UNITE HERE to advise affected individuals to stay vigilant, review financial statements, and report any suspicious activity. The union is also providing a year of complimentary credit monitoring and identity protection services.
On December 20, a group named INC RANSOM claimed responsibility for the cyber attack, sharing screenshots of the stolen data. UNITE HERE, acknowledging the threat, continues its efforts to enhance security, emphasizing its commitment to safeguarding sensitive information. This incident echoes a similar attack on SEIU Local 1000 earlier in the year, underlining the growing threat to labour unions and the imperative for robust cybersecurity measures.