Allied Services Division Welfare Fund sent notification letters after discovering that an unauthorized individual had gained access to an employee’s email account. The Fund says its investigation, carried out with outside cybersecurity specialists, determined that personal information may have been taken from that account sometime between October 9, 2024, and November 26, 2024, though the intrusion itself wasn’t confirmed until much later, on September 12, 2025.
The letter is addressed to individuals connected to the Fund’s benefit programs whose data may have passed through that email account during the window investigators identified. Because this is a welfare fund that administers health and benefit plans, the type of information typically handled in these accounts can include sensitive personal and health-related details, though the letter we reviewed doesn’t spell out the exact list.
What data was actually sitting in that mailbox?
- The section of the letter meant to list the specific information involved was blank in the copy provided to us, so we can’t confirm the exact data elements affected for any individual recipient.
- The letter does include a dedicated section on protecting against medical identity theft, which suggests health or insurance-related information may have been part of what was accessible in the email account.
- Given that this Fund administers welfare and benefit plans, the kinds of records commonly stored in staff email — Social Security numbers, health insurance IDs, or claims details — are the categories worth watching for even though they aren’t explicitly confirmed here.
No specific free credit monitoring or identity protection service enrollment was mentioned in the letter we reviewed. Instead, the Fund pointed recipients toward the standard self-service options: requesting a free annual credit report, placing a fraud alert, or freezing your credit file.
Steps worth taking if you got this letter
- Request your free credit reports from Equifax, Experian, and TransUnion at annualcreditreport.com and look over them line by line for accounts or inquiries you don’t recognize.
- Place a one-year fraud alert with any one of the three bureaus — it’s free, and once one bureau confirms it, the others are notified automatically.
- Consider a full security freeze on your credit file if you want a stronger barrier against new accounts being opened in your name; be aware it may briefly slow down your own credit applications.
- Because health information may be part of what was involved, review any explanation of benefits statements from your insurer and follow up on services or providers you don’t recognize.
- Given the uncertainty about exactly which data was exposed, it’s worth signing up for a service like Aura or LifeLock, which can alert you if your personal details turn up somewhere they shouldn’t.
- Keep an eye on account statements and credit card activity for the next several months, and file a police report if you spot signs of fraud tied to this incident.