New York City transit union purportedly targeted by Qilin

Cybernews reports that the Qilin ransomware operation has claimed it breached the Local 100 chapter of the Transport Workers Union of America, putting over 41,000 active New York City transit workers and 26,000 retirees at risk of identity theft.

In a post on its data leak site, Qilin alleged that it had already published data stolen from TWU Local 100, which is the largest transportation union around the world. While Qilin did not say how much information was taken or what files were involved, TWU Local 100 disclosed on its website its collection and retention of employees' contact details, salary information, job titles, medical and insurance benefits, and retirement and pension planning information.

Exposure of such information increases the threat of identity theft, benefit diversion scams, tax refund fraud, and pension withdrawal schemes, as well as social engineering campaigns. Nearly 200 organizations have been purportedly compromised by the Qilin ransomware gang so far this year.