Cyber Incident Victim: United Food and Commercial Workers Local 342
Date:
Apr 2025
Location:
United States of America
Summary
United Food and Commercial Workers Local 342 discovered that an unauthorized individual accessed its computer network and removed certain files, affecting approximately 56,615 individuals. The breach was identified after an investigation assisted by outside cybersecurity professionals, and notification letters were subsequently sent to those impacted. Edelson Lechtzin LLP is investigating potential class action claims on behalf of the affected persons.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 0 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On or about April 28, 2025, UFCW Local 342 became aware that an unauthorized individual had gained access to its computer network. The union promptly launched an investigation, enlisting outside cybersecurity professionals to assist. According to the investigation’s findings, the unauthorized access occurred between April 25, 2025, and April 28, 2025. During that window, certain files stored on the UFCW Local 342 network were accessed and removed by the intruder. The union’s internal detection mechanisms triggered the initial awareness of the incident.
The investigation determined that approximately 56,615 individuals had their personal information potentially exposed as a result of the breach. These individuals include members and associated persons across the union’s geographic footprint, which spans Long Island, the five boroughs of New York City, Westchester, Sullivan, and Orange Counties, as well as parts of New Jersey. On February 12, 2026, UFCW Local 342 formally confirmed the discovery of the data breach affecting its computer network. Subsequently, on March 9, 2026, the union began mailing notice letters to all affected individuals to inform them of the incident.
Edelson Lechtzin LLP announced that it is investigating data privacy claims on behalf of persons affected by the UFCW Local 342 data breach. The firm stated that it is pursuing a class action lawsuit seeking legal remedies for individuals whose sensitive personal data may have been compromised in the breach. The press release did not provide additional specifics about the types of data involved or the identity of the unauthorized individual.