Teamsters Union 25 Health Services & Insurance Plan Data Breach 2025: 19,231 Members and Dependents Exposed in Network Hack. Class-Action Investigations Open. What To Do.

Teamsters Union 25 Health Services & Insurance Plan, the multi-employer Taft-Hartley fund that delivers health benefits to Teamsters Local 25 members and their dependents across New England, filed a HIPAA breach notification with HHS OCR on September 3, 2025, reporting 19,231 affected individuals in a Hacking/IT Incident at a Network Server. Unauthorized activity was first detected on August 1, 2025; the Plan mailed individual notification letters the same day it filed with OCR.

Timeline

• August 1, 2025. The Plan identifies unauthorized activity within its network, isolates and secures the environment, and engages third-party cybersecurity specialists.
• August 18, 2025. Forensic review of affected files concludes. Investigators confirm that “certain data within our network was accessed and potentially copied without authorization.”
• September 3, 2025. Individual notification letters mailed. HHS OCR breach report filed: 19,231 affected, Network Server, Hacking/IT Incident. Concurrent filings made with Vermont, Maine, Massachusetts, and other state attorneys general.
• September 4 to 5, 2025. Multiple plaintiffs’ firms publicly open class-action investigations.

What was exposed

The Plan’s substitute notice at teamsterscare.com, the Vermont and Maine attorney general filings, and class-action firm pages list the following data elements:

• Full name
• Social Security number
• Member ID
• Health information
• Health insurance information

The Plan notes that the potentially impacted information may vary by individual and may include all or just one of these categories. Your individual notification letter will identify the exact subset of elements that applied to your record.

Who is notifying you, and why

Teamsters Union 25 Health Services & Insurance Plan, also known as TeamstersCare, is the HIPAA covered entity in this breach, not the union local itself. The Plan is a multi-employer health and welfare fund governed by a Board of Trustees and headquartered at 529 Main Street, Suite 209, Charlestown, MA 02129. It administers medical, prescription, dental, vision, and related benefits for Teamsters Local 25 members and their eligible dependents.

If you are a current or former Local 25 member, or a covered spouse, child, or other dependent enrolled in the Plan during the affected period, you are the population the Plan is writing to. Notices were sent by U.S. Mail to the address the Plan has on file. A dedicated assistance line was established at 1-833-456-5065 (Monday to Friday, 8am to 8pm EST), and the Plan is offering 12 months of complimentary credit monitoring and identity theft protection through Cyberscout, a TransUnion subsidiary, using the unique code printed in each notification letter.

Because the Plan is a Taft-Hartley fund, both active members and retirees who carried benefits through Local 25 should expect to be in scope. Dependents covered under a member’s plan are independently in scope and may receive their own letter if the Plan has separate address data on file.

Class-action posture

As of mid-May 2026, no consolidated complaint has been publicly docketed, but at least four plaintiffs’ firms have opened investigations and are signing up affected individuals: Strauss Borrelli PLLC, Federman & Sherwood, Edelson Lechtzin LLP, and Lynch Carpenter LLP. The pairing of Social Security numbers with HIPAA-regulated health and health-insurance data, combined with the size of the affected population, is the fact pattern that typically drives negligence and breach-of-fiduciary-duty claims against multi-employer health funds. This page will be updated when a complaint is filed.

What to do

1. Read your notification letter carefully. It will list the exact data elements that applied to your record and include the credit-monitoring enrollment code. Enroll within the deadline printed in the letter so coverage starts.
2. Place free credit freezes at Equifax, Experian, and TransUnion. SSN exposure is confirmed, so a freeze is the highest-leverage step you can take.
3. File IRS Form 14039 if you have any reason to suspect tax-related identity theft, and pull a free credit report at annualcreditreport.com.
4. Watch your health-plan EOBs for claims you did not receive. Exposure of member IDs and health-insurance information raises the risk of medical identity theft and false-claim activity against your Plan benefits.
5. Call the dedicated assistance line at 1-833-456-5065 if you have questions about whether your record was affected or how to enroll in monitoring.
6. If you want to stop the ongoing flow of your data to plan administrators, vendors, and downstream business associates, HealthConsent files HIPAA restriction requests against the covered entity and its known business associates.

Sources

• HHS Office for Civil Rights Breach Portal — federal regulatory record (filed September 3, 2025; 19,231 affected; Network Server; Hacking/IT Incident).
• Teamsters Union 25 HSIP — Data Incident Notice — entity’s own substitute notice, timeline, exposed-data listing, response measures.
• Vermont Attorney General — Teamsters Union 25 HSIP Data Breach Notice — state AG filing.
• Maine Attorney General breach notice — entity identification, credit-monitoring offering, Cipriani & Werner counsel of record.
• HIPAA Journal — Teamsters Union 25 Hacking Incident Affects 19,000 Members — affected count, timeline, exposed data elements.
• ClassAction.org — Teamsters Union 25 HSIP Data Breach — class-action investigation summary.
• Strauss Borrelli PLLC investigation — class-action investigation announcement.
• Federman & Sherwood investigation — class-action investigation announcement.
• Edelson Lechtzin LLP investigation (GlobeNewswire) — class-action investigation announcement.