The UA Sprinkler Fitters Local 669 Joint Apprenticeship and Training Committee (JATC) detected suspicious activity on its computer network on May 23, 2024, which indicated unauthorized file copying occurred between May 17 and May 23, 2024. The organization publicly disclosed the incident and reported that an international criminal group was responsible for the cyberattack.
The breach affected 20,623 individuals across the United States. Exposed data types include names, Social Security numbers, driver's license and state ID numbers, dates of birth, addresses, government IDs, medical information, financial information, biometric information, and health insurance information. The full extent of the compromised data for each individual remains unclear. Individuals received written notification of the breach starting on February 9, 2026, after the final analysis was completed on January 28, 2026.
Data breaches can be complex, and new information may emerge over time. Initial notifications may be delayed as companies investigate the full scope of an incident.