Boston Union

The organization is a Boston-based labor union's health fund that provides health benefits to members of the union. It operates as a health fund responsible for managing healthcare coverage and processing claims for its members. Headquartered in the United States, the fund serves the union workforce in the Boston area. Its primary function is to administer health plans and ensure that eligible members receive medical coverage.

On February 7, 2023, the health fund experienced a social engineering cyberattack that resulted in a financial loss of approximately $6.4 million. The attack did not compromise the personal information of union members, according to the organization's statement. Following the breach, the fund promptly engaged law enforcement and enlisted cybersecurity investigators to assist with the response. Authorities involved in the case expressed optimism about recovering most of the stolen funds.

The stolen funds were covered by insurance, which helped mitigate the financial impact of the incident. In response to the attack, the organization implemented enhanced employee cybersecurity training programs to raise awareness of social engineering tactics. It also revised its internal wiring procedures to strengthen controls over financial transactions. Additionally, the fund cautioned its members about sharing sensitive information online, noting that criminals could exploit such data for targeting purposes.

As a health fund dedicated to a labor union, the organization specializes in delivering healthcare benefits that are collectively bargained for union members. Its operations are subject to federal regulations that oversee employee health plans. The fund's focus on a specific workforce distinguishes it from broader commercial health insurers.

The incident underscores the importance of robust cybersecurity measures for organizations that handle significant financial transactions, even when their core mission is healthcare provision. By updating training and procedural controls, the fund aims to reduce the likelihood of similar events in the future. The experience serves as a reminder that vigilance against social engineering remains essential for all entities managing member funds.