HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedDelayed DiscoveryPIICREDENTIALSFINANCIALLowContained
VENTURA COUNTY CREDIT UNION
bd_004d28accb577cd9 · schema v1 · pii pii-v1
Full breach record for VENTURA COUNTY CREDIT UNION →VCCU (Ventura, CA) experienced unauthorized access to one employee email account Jan 29-30, 2024. Discovered Apr 15, 2024. Exposed: names, SSNs, financial account info. 7 Maine residents affected (44,474 total). VCCU notified federal law enforcement and NCUA. Offering 12-month Experian credit monitoring.
Maine clockDiscovered Apr 15, 2024 → Filed with AG Jun 20, 202466d ⏱ ME AG >30d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_16adfea87a25c634Montana State AGfiled 2024-06-20Verified
- bd_54934c9153dfbca0Indiana State AGfiled 2024-06-20Verified
- bd_9893e2549b7bb411California State AGfiled 2024-06-20Verified
- bd_bfa82828285b3bc4New Hampshire State AGfiled 2024-06-20Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d962305e-b266-4643-8f65-b83f6bae532b.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 20, 2024
- Raw hash
- 2deffb8122f45fab60b5d0c22df6bda9ee759b211c446c0be07efafa147274aa
Reporting entity
- Name
- VENTURA COUNTY CREDIT UNIONnorm: ventura county credit union
- Domain
- vccuonline.net
- Industry
- Financial Services
Victim entity
- Name
- VENTURA COUNTY CREDIT UNIONnorm: ventura county credit union
- Domain
- vccuonline.net
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Apr 15, 2024
- Materiality determined
- —
- Notification sent
- Jun 20, 2024
- Affected individuals
- 7
- Data types
- PIICREDENTIALSFINANCIAL
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified federal law enforcementNotified NCUA on February 27, 2024
Compliance
- Time to disclose
- 9 weeks(66 days from discovery to filing)
- Compliance flags
- ME AG >30d · 66dME resident >60d · 66d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 15, 2024→ Filed with AG: Jun 20, 202466d 30 days (soft) ME AG >30d Maine Discovered: Apr 15, 2024→ Notified: Jun 20, 202466d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.