On Aug. 21, 2025, United Food & Commercial Workers Local No. 7 (UFCW Local 7) concluded an investigation into a significant data breach that impacted tens of thousands of its members.
The breach, which was first detected as suspicious activity on the union’s network on Dec. 11, 2024, was quickly escalated to cybersecurity professionals for thorough examination. According to the union, an unauthorized actor accessed or acquired data from their systems on Dec. 10, 2024.
After months of forensic analysis and a comprehensive review of the compromised files, UFCW Local 7 determined that the personal information of 55,747 individuals in the United States was exposed. This included the first and last names and Social Security numbers of those affected. In Maine, 28 residents were impacted. The breach was reported to the Maine Attorney General’s office on Sept. 22, 2025.
Upon discovering the breach, UFCW Local 7 took steps to secure its network, including taking certain systems offline. The union engaged external cyber incident response professionals to investigate and remediate the situation. Law enforcement at both the local and federal level was notified about the incident. In addition to technical remediation, UFCW Local 7 has reviewed and updated its security policies and implemented additional safeguards to better protect against future threats.
For those affected, UFCW Local 7 is offering 12 months of complimentary credit monitoring and identity protection services through Cyberscout, a TransUnion company. Impacted individuals are being notified in writing.
The union encourages all affected members to remain vigilant by regularly reviewing their credit reports and account statements for suspicious activity. If any unusual activity is detected, individuals should promptly contact their financial institutions and consider filing a report with law enforcement, their state attorney general, or the Federal Trade Commission.
The union has provided a dedicated assistance line at 833-456-8750 for questions or concerns, available Monday through Friday, 7 a.m. to 7 p.m. CST.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.