Changeflow GovPing Data Breach JATC Data Breach Notification
Priority review Notice Added Final

JATC Data Breach Notification

Favicon for atg.wa.gov WA Data Breach Notifications
Published May 23rd, 2024
Detected March 1st, 2026
Email

Summary

The UA Sprinkler Fitters Local 669 Joint Apprenticeship and Training Committee (JATC) has issued a data breach notification following suspicious activity detected on May 23, 2024. The breach potentially exposed names, Social Security numbers, driver's license numbers, and medical information of 518 Washington residents.

What changed

The UA Sprinkler Fitters Local 669 Joint Apprenticeship and Training Committee (JATC) has issued a notice regarding a data security incident. Unauthorized access to the JATC's network occurred between May 17 and May 23, 2024, potentially exposing sensitive personal information including names, Social Security numbers, driver's license or state ID numbers, and medical information. The JATC has notified federal law enforcement, is implementing additional safeguards, and is offering one year of free credit monitoring services through TransUnion to affected individuals.

Regulated entities, particularly those handling sensitive personal data, should review their cybersecurity protocols and incident response plans. While this notice is specific to the JATC, it highlights the ongoing threat of cyberattacks and the importance of robust data protection measures. Affected individuals are advised to remain vigilant, monitor their accounts, and consider placing fraud alerts or security freezes on their credit files. The JATC has provided guidance on these protective measures and contact information for credit reporting agencies and relevant authorities.

What to do next

  1. Review cybersecurity incident response plans.
  2. Assess current data protection measures for sensitive personal information.
  3. Ensure timely and comprehensive data breach notifications are in place.

Source document (simplified)

EXHIBIT 1

This notice will be supplemented with a ny new significant facts learned subsequent to it s submission. By providing this notice, The U A Sprinkler Fitters Local 669 Joint Apprenticeship and Training Committee (“JATC”) does not waive any rights or defenses r egarding the applicability of Washington law, the applicability of the Washington data event notification statute, or pers onal jurisdiction. Nature of the Data Event On or about May 23, 2024, the JATC became aware of suspicious activity related to certain computer systems. Additionally, the JATC launched an investigation with the assistance of a third-pa rty forensic specialists to secure its network and to determine the nature and scope of the ac tivity. Through the i nvestigation, it was determined that there was unauthorized access t o the network between May 17, 2024, and May 23, 2024. As part of the i nvestigation, the JATC undertook an extensive forensic review of the potentially impacted files t o de termine whether any sensitive i nformation was present. It was through thi s process, which concluded on Ja nuary 28, 2026, that it was determined that information pertaining to certain individuals may have been included in the in volved files. The information tha t c ould have been subject to unauthorized a ccess i ncludes nam e, Social Security number, driver’s license number or state ID number, and medical information. Notice to Washington Residents On or about Febru ary 6, 2026, the JATC provided written notice of this incident to five hundred eighteen (518) Washington residents. W ritten notice i s bei ng provided in substantially the same form as the letter attached here as Exhibit A. Other Steps Taken and To Be Taken Upon discovering the event, the JATC moved quickly to investigate and r espond to the incident, assess the security of the JATC systems, and identify po tentially affected individuals. Further, the JATC notified federal law enforcement r egarding the e vent. The JATC is also working to implemen t additional safeguards and training to its employees. The JATC is provi ding acc ess t o credit monitoring services for one (1) year, through T ransUnion, to individ uals whose personal information was potentially affected by this incident, at no cost to th ese individuals. Additionally, t he JATC is prov iding impacted individuals with guidance on how t o be tter protect against identity theft and fraud. The JATC is providing indivi duals with information on how to place a fraud alert and security freeze on one’s credit file, the contact details for the national consumer reporting agencies, infor mation on how to obtain a free cr edit report, a reminder to remain vigilant for incidents of frau d and identity theft by reviewing account statements a nd monitoring free credit r eports, and encouragement to contact the Federal Trade Commission, their state Attorney General, and law enforcement to report attempted or actual identity theft and fraud. The JATC is providing written notice of this incident to relevant state and federal regulators, as necessary, and to the three major credit reporting agencies, Equifax, Experian, and TransUnion.

EXHIBIT A

USBF S1100- NASL -In div i dual National Autom ati c Spri nkler Local 669 JAT C c/o Cyberscout PO Box 1286 Dearborn, MI 48120 -9998 Februar y 4, 2 026 NOTICE OF SECURITY INCIDENT Dear: The UA Sprinkler Fitte rs Local 669 Join t Appr entices hip and Trai ning Committee (“JATC”) value s our relati onship with appli cants, a pprentic es, and contra cting partner s, and maintaini ng your tr ust and con fidence is i mportant to us. Our organization was the tar get of a cybersecurit y attack by an intern ational cr iminal group t hat impacted our computer networ k. We are writing to in form you about what happened, what information was involved, what we ha ve done to ad dress the situation a nd what you can do t o help pr otect you against possible misuse of information. What Happe ned? On or about May 23, 2024, we bec ame a ware of suspic ious activit y rel ated to cert ain JAT C co mputer systems. Upon learni ng of t he acti vity, with the as sistanc e of a t hird-party fore nsic sp eciali sts, we launc hed a comprehensive investigatio n to secur e our networ k and to deter mine the natur e, scope, an d impact of the activity. Through the in vestigation, it was determined t hat certai n fi les from our computer systems were c opied by an unauthor ized actor be tween May 17, 2024 and May 23, 2024. As part of our investi gation, we unde rtook an ext ensive fo rensic review of t he potential ly impacte d f iles to determine whether any sensit ive information was pre sent. It was t hrough th is proce ss, which conclude d on J anuary 28, 2026, that we de termined that information per taining to you may have been incl uded in the impacted files. What Inf ormat ion Was Invol ved? What We Are Doing. The J ATC takes the securit y of your inf ormation serio usly. Upon le arning of this inc ident, we quickly t ook s teps to secure our ne twork and maintain oper ations in a safe and secure fashion to co ntinue s erving the comm unity. As part of our ongoing comm itment to the privacy of pe rsonal information in our ca re, we con tinue t o re view ou r exist ing polici es and p rocedures and i mplement additiona l administr ative and technic al saf eguards to further secur e the information on our systems. We re main committed to fu lly complying with al l stat e and federal requir ements and maintaining ti mely and transpare nt communication with our mem bers and app licants. P 000 01010 2G0500 The information involved may include some combination of the following data types for you: <>.

Wh a t You Ca n Do. We e n co ura ge yo u to rem a in v i gi l ant again st in cide nts of i d e n tity the ft and fr aud by re vi e win g yo ur a cco unt st atem en ts and m o ni to ring y our free cre d it re ports fo r suspicio us activi ty and to d e te ct e rr ors. T o a ssist w ith thi s pr oc e ss, yo u m a y rev i e w t h e “ St e ps You Ca n T ake to P rotec t Person al Inf o rmatio n ” secti o n of thi s le tter. Fu rthe r, you m ay en rol l in co m pl im en tary id e ntity mo n i torin g servi ce s. T he en rol lm en t i n str uctio n s can be foun d in t he “ Enrol l in M on i torin g Servi ce s" se ctio n of th is le t te r. P le ase n o te, due to priv acy restrictio n s, we ar e unable t o a utom a ticall y en roll y ou in the co m pl im en tary id e n tity m on ito rin g se rvi ce s. For Mor e In f orm ati on. For assista nc e wi th que st io n s r e g ar di n g t hi s in ci d e n t, ple ase call 1-833-367-8699. Repre se n tative s a re available Mon d ay throug h Fr id ay, exc lud i n g ho li d ays, fr om 8am to 8pm, Eas te rn Tim e. Yo u m a y also write to the JATC a t 7050 Oakl and Mi ll s Road, S uite 100, Col um bi a, Mar yl and 21046. Sin ce re ly, U A Sprink l e r F itte rs Lo cal 669 Joi nt A ppren tic e shi p and Tr ain in g Co m m ittee

Steps Yo u Can Take To Prot ect Pe rsonal Inf ormat ion Enroll in Monitoring Ser vices In resp onse to t he incide nt, we ar e providing you with acc ess to Single Bureau Cre dit M onitori ng/Single Bureau Credit Report /Single Bur eau Cre dit Score s ervices at no char ge. The se service s pro vide you with al erts f or t welve (12) months from the date of enroll ment whe n changes occur to your credi t file. Th is noti ficati on is sent to you the same day that the c hange or update t akes place wit h the bure au. Final ly, we are providi ng you wit h proact ive fraud assist ance to help with any que stions that you might have or in t he event t hat you beco me a victim of fr aud. T hese services will be provide d by Cyberscout, a Tr ansUnion company specia lizing in f raud a ssista nce and remediation services. How do I enroll f or the free serv ices? To e nroll in Credit Moni toring ser vices at no charge, please log on to htt ps://bf s.cyber scout.com /activa te and follow the inst ruction s provided. When prompted please p rovide the f ollowing uni que code to rece ive services: In order for you t o recei ve the monitoring ser vices descri bed above, you must enrol l withi n 90 days from the da te of this l etter. The enr ollment requ ires an interne t connect ion and e-mail ac count and may not be available to minors under th e age of 18 years of age. Pleas e note t hat when si gning up for monitoring services, you may be asked to verify persona l informatio n for your own pro tection to confirm your identi ty. Monitor Your Accounts Under U.S. law, a consumer is entitled to one free credit repo rt an nually fr om each o f the three m ajor credit reporti ng bureaus, Equi fax, Experia n, and TransUnion. T o order a free cr edit repor t, visit www.annualcredi treport.com or call, toll-free, 1-877- 322-8228. Con sumers may al so dir ectly contact the thr ee major cr edit repor ting burea us listed below to reque st a fre e copy of thei r credit report. Consumers have t he right to place an init ial or exten ded “fraud alert ” on a c redit fi le at no cost. An initial fra ud alert is a 1-year alert that is placed on a consumer’s cre dit fi le. Upon see ing a f raud al ert displ ay on a consumer’s cr edit file, a busi ness is requ ired to take steps to verify the cons umer’s identit y bef ore extending new credit. If cons umers are the vict im of identi ty theft, they are ent itled to an extended fraud alert, which is a fr aud aler t lasti ng seven years. Should con sumers wish t o place a f raud ale rt, ple ase cont act any of t he thre e maj or credi t repor ting bureau s list ed below. As an alte rnative t o a fraud aler t, cons umers have t he right to p lace a “cr edit f reeze” on a credi t repo rt, which wil l prohibi t a c redit bur eau from r eleasin g i nformation in the credi t report without t he consumer’s express aut horization. The credit fre eze is de signed to pre vent credi t, loa ns, a nd service s from being appr oved in a con sumer’s name without consent. However, consumers should be aware that using a cre dit freeze to t ake con trol over who gets access to the p ersonal and f inancial informatio n in thei r cred it report may d elay, inte rfere with, o r prohi bit the timely approval of any subs equent reque st or appli cation t hey make r egarding a ne w loan, credit, mortgage, or any other account involving t he ext ension of credit. Pursuant to fe deral law, cons umers c annot be c harged to place o r lift a credit freeze on their c redit r eport. T o reque st a cr edit freeze, in dividuals may need to provide some or al l of t he followi ng information: 1. Full name (inc luding middle ini tial as well as Jr., Sr., II, I I I, etc.); 2. Social Se curity number; 3. Date of bi rth; 4. Addresses for the pri or two to f ive years; 5. Proof of current addr ess, such a s a curre nt util ity bill or telephone bi ll; 6. A legible phot ocopy of a government-issued ident ificat ion card (state dri ver’s lice nse or ID card, etc.); and 7. A c opy of eithe r the police report, investigati ve re port, or com plaint to a law enforcement agency concer ning identi ty theft if they are a victim of ide ntity thef t. Should consumers wish to place a credi t freeze or f raud alert, please conta ct the thre e major cre dit report ing bureaus liste d below: P 000 01020 28000 0

Equ i f a x Expe ri a n Tran sUni on https://w w w.e qui fax.com /person al/cred i t-r e po rt -se rvi ce s / https://w w w.e xpe rian.com /he l p/ https://w w w.tr ansuni o n.com /data - breach -h e lp 1-888-298-0045 1-888-397-3742 1-833-799-5355 Equi fax F ra ud A l e rt, P. O. Box 105069 A tlanta, GA 30348 -5069 Expe rian Fr aud Al e rt, P.O. Bo x 9554, A l le n, TX 7501 3 Tr a n sUn i o n, P. O. Box 2000, Che ste r, PA 19016 Equi fax Cr ed i t F ree ze, P. O. Box 105788 A tlanta, GA 30348 -5788 Expe rian Cr e di t Fr e e ze, P. O. Bo x 9554, A ll e n, T X 750 13 Tr a n sUn i o n, P. O. Box 160, Wo od l y n, PA 19094 Additional Informat ion Consumers may furt her educa te th emselves regardi ng identi ty theft, fra ud alert s, cr edit freezes, and the steps they can take to protect your persona l in formation by co ntactin g the consumer r eporting bureaus, the Federal Trade Comm ission, or their stat e Attorn ey General. Th e Federal Tr ade Commission may be reache d at: 600 Pennsylvania Avenue NW, Wash ington, D.C. 2 0580; www.ident itytheft.gov; 1-877-I D-THEFT (1-877-438-4338); and T TY: 1-866- 653-4261. The Federal T rade Commission also encour ages those who disc over that their i nformation has bee n misused to fi le a complaint wit h them. Consumers can obtain fu rther inf ormation on how to f ile such a c omplaint by way of the contact infor mation li sted above. Consu mers have the right to fi le a poli ce report if they ever experien ce identi ty theft or fraud. Ple ase not e that i n ord er to file a repor t wit h law enfor cement for identity thef t, cons umers will likely need t o p rovide some pr oof that they have been a victi m. Instances of known or suspe cted identit y thef t should also be re ported to law e nforcement and the rel evant state Att orney General. This notice has not bee n d elayed by law enforce ment. For Dist rict of Columbia resi dents, t he Dist rict of Columbia Attorney Gene ral may be contact ed at: 40 0 6th Stree t, NW, Wa shington, D.C. 20001; (202) 442-9828; and oag.dc.gov. T he UA Sprinkler Fitter s Local 669 J oint Apprenti ceship and Tra ining Comm ittee can be contacted at 7050 Oakland Mill s Road, Suit e 100, Col umbia, Maryland 210 46. For Mar yland resid ents, t he Maryland At torney Genera l may be contacted at: 200 St. Paul Place, 16th Floor, Baltimore, MD 21 202; 1- 410-576-6300 or 1-888-743-0023; and https:/ /www.marylandattorne ygeneral.gov/. The UA Sprinkler Fit ters Local 669 J oint Appre nticeshi p and T rainin g Committee can be c ontacted at 7050 Oakland Mill s Road, Suite 100, Columbia, Maryland 210 46. For New M exico resi dents, consumers have rights pursua nt t o the Fair Credi t Rep orting Act, such as the right to be told if information in th eir credi t file ha s bee n use d against them, the ri ght to know what is in th eir credit fil e, t he right to as k for thei r c redit score, and the right to di spute incomplete or inaccurat e information. Furthe r, pur suant to the Fair Credit Reporting Act, th e consumer repo rting bure aus must corr ect or de lete inac curate, incomplete, or unverifiab le information; cons umer repor ting agencies may not repo rt outdated negative i nformation; acc ess to consumers’ f iles is limited; co nsumers must give consent for credi t reports to be pr ovided to employers; cons umers may limit “pr escreen ed” offer s of cr edit and insuran ce based on i nformation in their credit report; and cons umers may seek damages from violator s. Consumers may ha ve add itional ri ghts under t he Fair Credit Re porting Act n ot summ arized here. Identity theft victi ms a nd acti ve- duty military personnel have specific addition al rights pur suant to the Fair Credit Report ing Act. We encour age consu mers to review their rights pur suant to t he Fa ir Credit Report ing Act by v isiti ng www.consumerfinance.gov/f/201504 cfpbsummaryyour- rights-under-fcra.pdf, or by writing Consumer Resp onse Center, Room 130 -A, Federal T rade Commission, 600 Pennsylvania Ave. N.W., Washington, D.C. 20580. For New York resi dents, the New York Attorne y Gener al may be conta cted at: Off ice of the Atto rney General, The Capitol, Albany, NY 12224-0341; 1- 800-771-7755; or https: //ag.ny.gov. For Nor th Car olina residen ts, t he Nor th Carolina Attorney General may be co ntacted at: 9001 Mail Service Center, Raleigh, NC 27699-9001; 1-877-566- 7226 or 1-919-716-6000; and www.ncdoj. gov. For Rhode Island reside nts, the Rhode Island Attorney Gene ral may be reache d at: 150 South Main Street, Providence, RI 02903; www.riag.ri. gov; and 1-401- 274-4400. Under Rhod e Island law, individual s ha ve the ri ght to obtain any polic e report fil ed in regard to this event. The re are approx imately [#] Rhode I sland resi dents that may be impacted by this e vent. <a href="https://url.avanan.click/v2/https://www.transunion.com/data-breach-help.YXAzOm9kbDE6YTpvOjlmMDU4NzIzOTU5NzUyODUyN2U1NTJmNjhhNWM2ZDA5OjY6ZDYwNTo2MGQ2YmYyOGMxNDYyOWUyYTc3YWM0YWZlNjBiMjNmOTc5YWYyNWNmNWMzZjBjNTRhMDQ4YzQzNzU0YTZjOTc0OnA6VDpG"> <a href="https://url.avanan.click/v2/https://www.transunion.com/data-breach-help_.YXAzOm9kbDE6YTpvOjlmMDU4NzIzOTU5NzUyODUyN2U1NTJmNjhhNWM2ZDA5OjY6ZDYwNTo2MGQ2YmYyOGMxNDYyOWUyYTc3YWM0YWZlNjBiMjNmOTc5YWYyNWNmNWMzZjBjNTRhMDQ4YzQzNzU0YTZjOTc0OnA6VDpG">

Source

Analysis generated by AI. Source diff and links are from the original.

Classification

Agency
Various State Agencies
Published
May 23rd, 2024
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Substantive

Who this affects

Applies to
Employers Educational institutions
Geographic scope
National (US)

Taxonomy

Primary area
Data Privacy
Operational domain
Compliance
Topics
Cybersecurity Consumer Protection

Get Data Breach alerts

Weekly digest. AI-summarized, no noise.

Free. Unsubscribe anytime.

Get alerts for this source

We'll email you when WA Data Breach Notifications publishes new changes.

Free. Unsubscribe anytime.