TWU Local 100 Data Breach: Personal and Health Info of Workers Potentially Exposed

Transport Workers Union Local 100, a labor union representing approximately 44,000 transportation workers in the New York City public transit system, disclosed a data breach involving unauthorized access to its computer systems in early 2026.

The breach was disclosed to the Massachusetts Office of Consumer Affairs and Business Regulation on April 24, 2026. Consumer notices were sent on that same date.

TWU Local 100 identified an intrusion on certain of its computer systems by an unauthorized third party. The union took action to review the incident and secure its systems.

The review indicated that the unauthorized access may have begun on Jan. 29, 2026, and ended on Feb. 3, 2026. During that window, certain data files were accessible to the unauthorized party.

On April 15, 2026, the union determined that some of the files contained personal information during the time the unauthorized third party had access to them. The types of personal information exposed included names, dates of birth, Social Security numbers and health insurance subscriber identification numbers.

On Feb. 23, 2026, a ransomware group known as Qilin posted a claim on the dark web, stating it had obtained the organization's data.

Transport Workers Union Local 100's response to the breach

TWU Local 100 is offering affected individuals complimentary access to identity theft protection services through IDX for 24 months at no cost. These services include credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy and fully managed identity theft recovery services.

Affected individuals can enroll by calling 1-855-830-5808 or visiting the IDX enrollment page. IDX representatives are available Monday through Friday from 9 a.m. to 9 p.m. Eastern Time. The enrollment deadline is July 24, 2026. Individuals will need the enrollment code included in their notification letter to sign up.

Steps to take if affected by the Transport Workers Union Local 100 data breach

• Place a fraud alert or credit freeze. Contact Equifax (1-800-525-6285), Experian (1-888-397-3742) and TransUnion (1-800-680-7289) to help prevent unauthorized accounts from being opened.
• Review credit reports regularly. Request free credit reports at AnnualCreditReport.com and check for any unfamiliar accounts or inquiries.
• Monitor health insurance statements carefully. Because health insurance subscriber identification numbers were involved, review Explanation of Benefits statements for any medical services not received.
• Consider requesting an IRS Identity Protection PIN. Since Social Security numbers were exposed, an IP PIN from the IRS can help prevent fraudulent tax returns from being filed.
• Be cautious of phishing attempts. Watch for suspicious emails, texts or phone calls that reference Transport Workers Union Local 100 or this breach by name, as scammers sometimes use data breach notifications to trick people into sharing additional personal information.