PAMCAH-UA Local 675 Health and Welfare Fund Data Breach Investigation

Data Breach Blog

Data Breach

PAMCAH-UA Local 675 Health and Welfare Fund Data Breach Investigation

Almeida Law Group Calendar Icon

Date of data breach:

September 1, 2026

by: Almeida Law Group

Almeida Law Group is investigating a data breach at PAMCAH-UA Local 675 Health and Welfare Fund. If you were affected, contact Almeida Law Group.

About PAMCAH-UA Local 675 Health and Welfare Fund

PAMCAH-UA Local 675 Health and Welfare Fund is a union-sponsored, multiemployer employee welfare benefit trust affiliated with Plumbers & Fitters UA Local 675. Based in Honolulu, Hawaii, the fund provides health and welfare benefits—including medical, prescription drug, dental, vision, life, and accidental death and dismemberment coverage—to eligible employees and their families. Because the fund administers health benefits for its members, it maintains sensitive personal, medical, and financial records on the individuals it serves.

What Happened?

PAMCAH-UA Local 675 Health and Welfare Fund was listed in an HHS Office for Civil Rights breach portal report submitted on August 3rd, 2026. The incident was classified as a Hacking/IT Incident involving email accounts, and it affected 8,319 individuals.

According to the organization’s own breach notice, an unauthorized party gained access to certain employee email accounts between September 23rd, 2025, and October 9th, 2025. Upon discovering the incident, PAMCAH initiated an internal investigation, took steps to contain it, and engaged a forensic cybersecurity firm. A review of the potentially accessed material determined that the exposed information included names, dates of birth, health insurance information, medical information, Social Security numbers, and driver’s license numbers. For a small number of individuals, financial account information was also involved. The specific data types varied by person. PAMCAH is offering affected individuals complimentary two-year Experian IdentityWorks Credit 3B memberships. The breach was also disclosed to the Massachusetts Office of Consumer Affairs and Business Regulation on August 3rd, 2026. Notably, approximately ten months elapsed between the incident in fall 2025 and the regulatory notification in August 2026. Two law firms—Shamis & Gentile P.A. and Strauss Borrelli PLLC—have announced investigations into the breach, though no filed class action complaint has been identified as of this writing.

Key Facts at a Glance

  • Company or Organization: PAMCAH-UA Local 675 Health and Welfare Fund
  • Industry: Health Plan / Union-Sponsored Employee Welfare Benefit Trust
  • Location: 1109 Bethel St, Suite 403, Honolulu, HI 96813
  • Incident type: Hacking/IT Incident (unauthorized email account access)
  • Date of breach: September 23rd, 2025
  • Date breach discovered: October 9th, 2025
  • Date of consumer notification: August 3rd, 2026
  • Total persons affected: 8,319
  • Identity theft protection offered: Two-year Experian IdentityWorks Credit 3B membership
  • Litigation status: Investigations announced by Shamis & Gentile P.A. and Strauss Borrelli PLLC; no filed class action identified as of this writing
  • Source: HHS Office for Civil Rights breach portal report; PAMCAH-UA Local 675 Official Data Security Incident Notice; ClaimDepot: PAMCAH Data Breach Exposes PHI and PII

What Should You Do?

If you received a notice from PAMCAH-UA Local 675 Health and Welfare Fund, enroll in the complimentary two-year Experian IdentityWorks Credit 3B membership as soon as possible and note any enrollment deadline stated in your notice. Because health, medical, and financial information was involved, carefully review your Explanation of Benefits statements and medical records for any services you did not receive, and watch for unexpected medical bills. Place a fraud alert or credit freeze with each of the three major credit bureaus—Equifax, Experian, and TransUnion—to reduce the risk of new accounts being opened in your name. You are entitled to free annual credit reports through AnnualCreditReport.com, and reviewing them regularly can help you spot unauthorized activity early. If you discover signs of identity theft, report them and get a recovery plan at IdentityTheft.gov.

Your Legal Rights

If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.

Were You a Victim of a Data Breach?

"*" indicates required fields

By clicking the SEND button and submitting this form, I consent to receive communications from Almeida Law Group LLC and their co-counsel by phone call, email, and/or SMS regarding this matter and other potential legal matters. I understand that message and data rates may apply and that consent to such contact is not required for use of these services. Message frequency varies. Reply STOP to opt-out and HELP for help. I also agree to the Privacy Policy. I understand that my information may be shared with advertising partners to deliver targeted advertisements and optimize outreach efforts. I confirm that I am at least 18 years old. I have read and understand the disclaimer above. I agree my use of this site and the information provided here is not intended to create and does not create an attorney client relationship with the Almeida Law Group and/or attorneys employed by the Firm. No attorney client relationship is intended or created unless and until an engagement agreement is signed by all relevant parties. The contents of this site constitute attorney advertising and not legal advice; therefore you should not act or rely upon any information contained herein, and should always seek the advice of an attorney.

Resourceful. Resilient. Relentless.

Contact us today to get the justice you and your family deserve.