The North Atlantic States Carpenters Benefit Funds (NASCBF) recently notified affected individuals of a data breach impacting the personal information of thousands, including over 2,000 residents in Maine. The breach was caused by unauthorized access to the organization’s systems, which exposed sensitive data such as Social Security numbers and financial details.
NASCBF’s Data Breach Investigation
On August 18, 2025, NASCBF detected suspicious activity on their network, particularly in their Hamden, CT office. Upon recognizing the breach, they took immediate action by resetting passwords and limiting the breach’s scope. To investigate the extent of the attack, they enlisted the help of third-party specialists, who determined that an unauthorized actor accessed and/or acquired certain files within their systems.
NASCBF’s investigation culminated in January 2026, when they were able to identify all potentially impacted individuals. The breach was limited to files containing personal information such as names, Social Security numbers, and financial account data. However, it was confirmed that no funds were taken, and participants’ benefits and account balances with NASCBF remained intact.
The organization worked swiftly to notify affected individuals, issuing a formal notification on February 11, 2026, to 2,063 Maine residents. They also alerted federal law enforcement and took steps to ensure similar incidents could be avoided in the future. As a protective measure, NASCBF offered 12 months of credit monitoring through Epiq, at no cost to those affected. This step was intended to help safeguard against identity theft or further misuse of the exposed data.
NASCBF’s response reflects a commitment to improving the security of their systems, with a thorough review of protocols, policies, and procedures now underway. They have also provided guidance to impacted individuals on how to protect themselves from identity theft, including instructions for placing fraud alerts, security freezes, and how to monitor credit reports for unusual activity.
When Did This Breach Occur?
The breach occurred on August 18, 2025. NASCBF became aware of the suspicious activity shortly after, and the breach was officially discovered on January 13, 2026.
What Information Was Breached?
The following types of information were potentially accessed or acquired during the breach:
These data elements were stored within files accessed by the unauthorized actor, exposing individuals to potential identity theft or fraud risks.
What You Can Do
If you are one of the impacted individuals, it’s important to take the following steps to protect your information:
-
Enroll in Credit Monitoring: NASCBF is offering 12 months of credit monitoring services through Epiq. Be sure to sign up for this service as soon as possible to monitor any suspicious activity on your credit report.
-
Place a Fraud Alert or Security Freeze: Consider placing a fraud alert or security freeze on your credit files to prevent new accounts from being opened in your name. This can be done for free with the major credit bureaus.
-
Monitor Your Accounts: Regularly review your bank and credit card statements, as well as any other relevant account statements, for unauthorized transactions.
-
Report Fraud: If you suspect fraud, contact your financial institutions, credit card companies, or banks immediately. You should also consider reporting the issue to the Federal Trade Commission (FTC) and your state Attorney General.
-
Obtain a Free Credit Report: Take advantage of your right to receive a free credit report annually from each of the three major credit bureaus to check for errors or signs of fraudulent activity.
By following these steps, you can help protect yourself from further harm due to this breach.
File a Data Breach Lawsuit Against NASCBF
If you were affected by the NASCBF data breach and have received notification of the incident, you may be eligible to join a class action lawsuit. Victims of data breaches often have the right to seek compensation for the harm caused by the breach, including identity theft risks, potential fraud, and other damages.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach or have reason to believe you were impacted, fill out our quick, easy, secure form to sign up. There’s no cost to reach out to our legal partner, and there’s no obligation to take further action after speaking with someone from our team. Don’t let this breach go unchecked—take the first step toward justice today!
