NASCBF Data Breach Exposes Sensitive Personal and Health Information On December 10, 2025, the North Atlantic States Carpenters Benefit Funds (NASCBF), a provider of employer-paid health and welfare benefits, disclosed a cybersecurity incident involving unauthorized access to its network. The breach potentially compromised a wide range of sensitive data belonging to an undisclosed number of individuals. The exposed information includes personally identifiable information (PII) and protected health information (PHI), such as: - Social Security numbers - Dates of birth - Financial account or payment card details (including access codes) - Login credentials - Tax information - Military identification numbers - Medical treatment, history, or diagnosis records - Health insurance details - Biometric data - Driver’s licenses, state-issued IDs, passport numbers, and license plate numbers The incident is currently under investigation by Lynch Carpenter, LLP, a national class action law firm, which is reviewing potential legal claims against NASCBF. The firm has previously represented clients in data privacy cases and is soliciting affected individuals for case evaluations. NASCBF has not yet released details on the scope of the breach, the method of intrusion, or the exact number of individuals impacted. Further updates may follow as the investigation progresses.