IL · AG Filing: Jan 13, 2026
No cost. No obligation. If your data was exposed by NORTH ATLANTIC STATES CARPENTERS BENEFIT FUNDS, you may be entitled to financial compensation.
Start Free Review →Based on the data types reported in this filing:
Your SSN is the master key to your identity. Once exposed, criminals can open new lines of credit, take out loans, or file taxes in your name.
Combined with a name and other leaked data, date of birth helps criminals pass identity verification questions at banks and government agencies.
NORTH ATLANTIC STATES CARPENTERS BENEFIT FUNDS was the subject of a data breach notification filed with the IL Attorney General. The AG filing was recorded on January 13, 2026.
From the AG filing description
The North Atlantic States Carpenters Benefit Funds operates as a critical multiemployer labor-management trust fund, administering comprehensive health, welfare, pension, and retirement benefits for union carpenters and their families throughout the region. Because of its core mission, the organization functions as a massive repository of deeply sensitive personal, financial, and protected health information. To properly manage health insurance claims, track pension contributions, verify union eligibility, and disburse retirement benefits, the funds must routinely collect and retain intricate dossiers on thousands of participants, beneficiaries, and dependents. This wealth of information makes the institution a high-value target for malicious cybercriminals seeking to exploit centralized databases filled with lucrative personal identifiers. In 2026, the organization reported a significant data security incident to the Illinois Attorney General, signaling a breach that compromised its internal network infrastructure or third-party administrative systems. In incidents involving multiemployer benefit trust funds, cyberattacks typically involve sophisticated network intrusions, ransomware deployments, or unauthorized access to legacy databases housing member records. Threat actors frequently probe these networks for vulnerabilities in employee portals, administrative software, or cloud-hosted benefit management platforms. Once inside, unauthorized parties can harvest vast amounts of confidential files before deploying encryption software or demanding extortion. The exposure resulting from this incident encompasses a dangerous mixture of financial, demographic, and protected health data. Compromised categories commonly include full names, dates of birth, Social Security numbers, banking and direct deposit details, health insurance claim histories, and detailed pension or wage records. The theft of Social Security numbers and financial account information exposes victims to immediate risks of identity theft, fraudulent credit card applications, and unauthorized banking withdrawals. Meanwhile, the exposure of healthcare claims and benefit details creates severe vulnerabilities to medical fraud, where bad actors utilize stolen identities to bill insurance providers or obtain unauthorized prescription drugs and medical services. As an administrator of health and retirement benefits, the North Atlantic States Carpenters Benefit Funds is bound by strict federal and state regulatory frameworks, including the Employee Retirement Income Security Act (ERISA), the Health Insurance Portability and Accountability Act (HIPAA), and various state data breach notification statutes. These laws impose affirmative legal duties to implement robust administrative, physical, and technical safeguards to secure sensitive participant data. The occurrence of a data breach of this magnitude strongly suggests potential failures in cybersecurity protocols, inadequate network monitoring, or a failure to properly vet and secure third-party vendor access points, directly violating the organization's duty of care. Receiving an official data breach notification letter from the North Atlantic States Carpenters Benefit Funds serves as formal legal acknowledgement that your confidential information was compromised due to inadequate security measures. Under the law, this notification establishes the legal standing necessary to participate in a class action lawsuit aimed at holding the fund accountable for failing to protect your data. Victims do not need to wait until financial fraud occurs to take legal action; the increased and imminent risk of future identity theft is sufficient. Our firm evaluates these cases on a strict contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.
You may have been affected by the NORTH ATLANTIC STATES CARPENTERS BENEFIT FUNDS data breach if:
Common categories of compensation in data breach class actions
The hours spent responding to a data breach — canceling accounts, contacting credit bureaus, updating passwords, and investigating fraud — represent compensable economic harm in data breach litigation.
Once your SSN is exposed, protection becomes an ongoing expense. Plaintiffs in data breach settlements have recovered costs for credit freezes, identity protection subscriptions, and time spent dealing with fraudulent accounts — sometimes covering multiple years of exposure.
HIPAA violations carry civil penalties between $100 and $50,000 per violation. Where a healthcare organization's negligence led to the exposure of protected health information, class members may recover statutory damages in addition to actual losses.
Fees charged to close and reopen accounts, issue replacement cards, or dispute fraudulent transactions are recoverable in data breach litigation. So are the costs of overdrafts, late payments, and credit damage caused by unauthorized activity.
Several state data breach laws provide for statutory minimum damages — fixed amounts recoverable per affected individual regardless of actual loss. These provisions exist specifically to make legal action viable for victims who have not yet experienced direct harm.
Note: an attorney general breach filing does not by itself establish a settlement fund, a payment amount, or a claim deadline. If an official settlement notice is later issued, rely on that notice for payment details and deadlines.
Applicable State Law
This breach was reported under the Illinois Personal Information Protection Act (PIPA), which mandates notification and establishes your right to seek damages.
No. Under Illinois Personal Information Protection Act (PIPA) and federal law, the unauthorized exposure of your personal data — regardless of whether it has been actively misused — can be sufficient grounds for a claim. The breach itself is the injury.
Nothing. The Law Office of David S. Harris handles data breach cases on contingency — you pay zero upfront and owe nothing unless compensation is recovered.
Immediately place a free credit freeze at all three bureaus (Equifax, Experian, TransUnion). A freeze blocks new accounts from being opened in your name. Then file a complaint with the FTC at IdentityTheft.gov and contact our office — SSN exposure is one of the most serious breach types.
If NORTH ATLANTIC STATES CARPENTERS BENEFIT FUNDS is a covered healthcare entity or business associate under HIPAA, affected patients have additional rights — including the right to an HHS complaint. These HIPAA violations also strengthen civil damages claims. Consult an attorney to understand your full remedies.
Banks may reverse fraudulent charges, but they are not obligated to compensate you for time lost, stress, or indirect damages. A class action claim against the breached company can recover those additional categories of harm.
State statutes of limitations for data breach claims typically run 2–4 years from the date of the breach or its discovery. Because this breach was recently disclosed, the window is open — but acting early preserves your options and strengthens the case.
Accepting free credit monitoring from NORTH ATLANTIC STATES CARPENTERS BENEFIT FUNDS does not waive your right to pursue legal action unless you signed a specific release waiving claims. In most cases, victims who accepted monitoring can still file.
Learn how to participate in the class action and what compensation you may be entitled to.
Join the Class Action →Use our verification tool to confirm your letter matches this official AG filing.
Verify My Notice LetterThis case file references a public filing made with the state filing in IL. This website is not affiliated with, endorsed by, or operated by any state government agency.
NORTH ATLANTIC STATES CARPENTERS BENEFIT FUNDS breach?
Free case review · No fee unless you win