Union demands accountability, considering legal action as personal information of
585 workers was compromised
Boise, ID – In the wake of a severe security breach at Valley Regional Transit (VRT) that resulted in First Transit employees' personal information being compromised as well as continued mismanagement, Amalgamated Transit Union (ATU) Local 398 members are demanding change.
"Our question is how did this happen, and why did they wait over three months to tell us? Why did we have to find out from the media that our members' personal and financial information was compromised? We also want to know why VRT had our information in the first place when they aren't our employers. This severe and egregious security breach and lack of communication have only added insult to injury," said Local President Doug Buckendorf. "Our members have been heroes on the frontlines of the pandemic providing essential transportation to keep our community moving. We deserve better than this. Our members' demands for accountability must be heard."
The security breach of 585 employees, including Local 398 members and their families, involved personal information, including names, phone numbers, addresses, birthdates, and Social Security or driver's license numbers. The incident, which is believed to have occurred in October last year, was not initially disclosed for months to the Local. In response, VRT only offered one year of credit monitoring.
Despite numerous requests from the Local, the VRT has refused to work with the Local to address the concerns of the Local and members. At the minimum, the Local is requesting LifeLock identity theft protection for affected employees.
"It's outrageous that in response to a breach that included our member's families and underage children that could be affected by this their entire lives, they offer one year of credit monitoring. It's unacceptable and irresponsible," said ATU International President John Costa. "This lack of leadership at the VRT needs a response immediately."