Data BreachInvestigation Open

UA Sprinkler Fitters Local 669 Joint Apprenticeship and Training Committee Data Breach — Official Case File

OR filing|Reported Feb 6, 2026|8 data types exposed

Just received a notice letter? Cases are filed first-come, first-served. You may be entitled to compensation.

Claim Free Review →

Quick Facts

State Filed
OR
Date Reported to AG
Feb 6, 2026
Date of Breach
May 17, 2024
Records Affected
Not disclosed
Status
Investigation Open
Last Updated
Oct 5, 2026
Data Types Exposed
Full NameSocial Security NumberDate of BirthMailing AddressWage and Compensation InformationTax Return InformationDirect Deposit Account DetailsApprentice Record Information

About This Security Incident

UA Sprinkler Fitters Local 669 Joint Apprenticeship and Training Committee was the subject of a data breach notification filed with the OR Attorney General. The AG filing was recorded on February 6, 2026. The breach or discovery date reported in the filing is May 17, 2024.

From the AG filing description

The UA Sprinkler Fitters Local 669 Joint Apprenticeship and Training Committee operates as a specialized educational and workforce development institution, administering comprehensive apprenticeship training programs for union fire sprinkler fitters across multiple jurisdictions, including Oregon. Because of its core mission, the organization acts as a central repository for extensive personal, financial, and employment-related records. It collects and maintains sensitive data not only for its administrative staff and instructors, but also for hundreds of apprentices and journeymen throughout their multi-year training lifecycles. This trove of information typically includes comprehensive onboarding paperwork, federal and state tax documents, direct deposit banking details, apprentice evaluation metrics, and detailed personal identifiers required for union registration, benefit administration, and wage tracking. In 2026, the organization reported a significant data security incident to the Oregon Attorney General, raising serious concerns among the affected union members, apprentices, and personnel whose confidential details were compromised. While the full forensic scope continues to be evaluated, incidents affecting labor training committees and multi-employer trust organizations frequently involve sophisticated network intrusions, unauthorized third-party vendor access, or targeted ransomware deployments that exploit vulnerabilities in legacy administrative databases or cloud-based record-keeping systems. These attacks often bypass perimeter defenses, allowing unauthorized actors to quietly infiltrate internal networks and extract unencrypted archives containing years of accumulated personal and financial documentation. The exposure resulting from this security failure places affected individuals at a severe, immediate risk of identity theft, financial fraud, and targeted scams. Because training committees routinely gather high-value credentials such as Social Security numbers, dates of birth, banking routing details, and home addresses, victims face prolonged vulnerabilities. A compromised Social Security number combined with employment and compensation data allows malicious actors to open fraudulent credit lines, intercept tax refunds, file unauthorized unemployment claims, or execute sophisticated phishing schemes tailored to union members. The psychological and financial toll of guarding against ongoing fraud significantly impacts victims who trusted the committee with their private documentation as a condition of their employment and professional training. Under Oregon state data privacy laws and general common-law principles, organizations that collect and store sensitive personal information have an affirmative legal duty to implement and maintain reasonable cybersecurity safeguards. This includes adhering to recognized industry standards such as multi-factor authentication, network segmentation, routine vulnerability patching, and robust data encryption. The occurrence of a widespread data breach strongly suggests a failure in these mandatory security protocols. When an entity entrusted with confidential records fails to secure its digital environment against foreseeable threats, it may be held legally accountable for negligence and breach of implied contract under state jurisprudence. Receiving an official data breach notification letter from the UA Sprinkler Fitters Local 669 Joint Apprenticeship and Training Committee serves as formal acknowledgment that your private information was compromised due to inadequate security measures. Legally, this notification establishes the necessary standing to participate in a class action lawsuit aimed at holding the organization accountable and securing financial compensation for your increased risk and mitigation efforts. Our law firm evaluates these cases on a strict contingency fee basis, meaning you pay nothing out of pocket, and we only collect a fee if we successfully recover compensation on your behalf.

Exposed Data — What's at Risk

Based on the data types reported in this filing:

Identity Theftcritical risk

Your SSN is the master key to your identity. Once exposed, criminals can open new lines of credit, take out loans, or file taxes in your name.

Identity Verification Bypassmedium risk

Combined with a name and other leaked data, date of birth helps criminals pass identity verification questions at banks and government agencies.

Are You One of the Victims?

You may have been affected by the UA Sprinkler Fitters Local 669 Joint Apprenticeship and Training Committee data breach if:

  • You received a written data breach notification letter from UA Sprinkler Fitters Local 669 Joint Apprenticeship and Training Committee
  • You are or were a customer, patient, or employee of UA Sprinkler Fitters Local 669 Joint Apprenticeship and Training Committee
  • Your information was held by UA Sprinkler Fitters Local 669 Joint Apprenticeship and Training Committee in OR
  • Your bank or payment card data was potentially exposed

What the Law Gives You

Common categories of compensation in data breach class actions

Time & Inconvenience

Courts recognize that the time spent monitoring accounts, placing credit freezes, and dealing with the aftermath of a breach has real economic value. This category of damages is recoverable even without direct financial loss.

Credit Monitoring & Identity Restoration

Professional credit monitoring services cost $10–$40 per month. Identity theft restoration services, if needed, can cost hundreds of hours and thousands of dollars. Courts have awarded these costs as direct damages in SSN breach cases.

Financial Losses & Fraudulent Charges

Direct financial losses resulting from the breach — unauthorized charges, fraudulent transfers, or fees incurred through fraud — are recoverable as compensatory damages. Banks may reverse some charges; a class action recovers the remainder and associated costs.

Statutory Minimum Damages

Several state data breach laws provide for statutory minimum damages — fixed amounts recoverable per affected individual regardless of actual loss. These provisions exist specifically to make legal action viable for victims who have not yet experienced direct harm.

Note: an attorney general breach filing does not by itself establish a settlement fund, a payment amount, or a claim deadline. If an official settlement notice is later issued, rely on that notice for payment details and deadlines.

Applicable State Law

This breach was reported under the Oregon Consumer Information Protection Act, which mandates notification and establishes your right to seek damages.

Frequently Asked Questions

Do I need proof that my data was misused to file a claim against UA Sprinkler Fitters Local 669 Joint Apprenticeship and Training Committee?

No. Under Oregon Consumer Information Protection Act and federal law, the unauthorized exposure of your personal data — regardless of whether it has been actively misused — can be sufficient grounds for a claim. The breach itself is the injury.

How much does filing a claim cost?

Nothing. The Law Office of David S. Harris handles data breach cases on contingency — you pay zero upfront and owe nothing unless compensation is recovered.

My Social Security Number was exposed. What should I do right now?

Immediately place a free credit freeze at all three bureaus (Equifax, Experian, TransUnion). A freeze blocks new accounts from being opened in your name. Then file a complaint with the FTC at IdentityTheft.gov and contact our office — SSN exposure is one of the most serious breach types.

My financial account data was exposed. Can the bank recover my losses?

Banks may reverse fraudulent charges, but they are not obligated to compensate you for time lost, stress, or indirect damages. A class action claim against the breached company can recover those additional categories of harm.

Is there a deadline to file a claim?

State statutes of limitations for data breach claims typically run 2–4 years from the date of the breach or its discovery. Because this breach was recently disclosed, the window is open — but acting early preserves your options and strengthens the case.

What if UA Sprinkler Fitters Local 669 Joint Apprenticeship and Training Committee offered me free credit monitoring after the breach?

Accepting free credit monitoring from UA Sprinkler Fitters Local 669 Joint Apprenticeship and Training Committee does not waive your right to pursue legal action unless you signed a specific release waiving claims. In most cases, victims who accepted monitoring can still file.

Do I need to have received a notice letter to be eligible?

Not necessarily. Many data breach victims are never notified directly. If your personal information was held by UA Sprinkler Fitters Local 669 Joint Apprenticeship and Training Committee during the relevant period, you may still qualify even without receiving a letter. A free eligibility review can confirm your status.

Received a notification letter from UA Sprinkler Fitters Local 669 Joint Apprenticeship and Training Committee?

Read our dedicated guide — what the letter means and what to do.

Read Letter Guide →
Filing Window Open

Received a Notice Letter?

Cases are filed first-come, first-served. Submit now for a free attorney review — no cost, no obligation.

Start typing to find a matching case, or enter a company not yet listed.

Attach a copy of your data breach notification letter. Accepted: PDF, JPG, PNG — max 10 MB.

No attorney-client relationship is created by submitting this form. Attorney Advertising.

Seek Compensation

Learn how to participate in the class action and what compensation you may be entitled to.

Join the Class Action →

Received a notice letter?

Use our verification tool to confirm your letter matches this official AG filing.

Verify My Notice Letter

This case file references a public filing made with the state filing in OR. This website is not affiliated with, endorsed by, or operated by any state government agency.

UA Sprinkler Fitters Local 669 Joint Apprenticeship and Training Committee breach?

Free case review · No fee unless you win

Call Now