LiUNA Local 1184 notified members of a 2024 ransomware data breach

Laborers' International Union of North America Local 1184, a construction union local in southern California, told regulators that its network was breached on 17 November 2024. An unauthorised party used credentials obtained from sources outside the local to log in and then deployed ransomware. The local said it regained control of its systems the following day.

A subsequent review established that files holding personal information had been accessible during the intrusion. The categories identified were names, Social Security numbers, membership numbers, telephone numbers, home addresses, email addresses and work dispatch records. Those affected included current and former members, individuals the local represented, and its own employees.

Local 1184 filed a breach notice with the California Attorney General on 31 March 2025 and began mailing notification letters directly to individuals. Neither the filing nor subsequent coverage disclosed a total number of people affected, named the ransomware group involved, or said whether a ransom was demanded.

The incident produced litigation. A class action captioned Fava v. Laborers International Union of North America Local 1184 was filed in the Superior Court of California for the County of Imperial, case number ECU004029, and reached a settlement under which the union agreed to fund up to $160,000 in aggregate benefits, including credit monitoring and payments for documented ordinary and extraordinary losses. The deadline for class members to file claims, object or opt out was 30 January 2026.