HackingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
KOHLER CREDIT UNION
bd_02eecfc3839c71a6 · schema v1 · pii pii-v1
Full breach record for KOHLER CREDIT UNION →Kohler Credit Union reported an external system breach (hacking) occurring between September 23, 2020, and November 30, 2020, discovered on February 25, 2021. The incident affected 13,714 individuals, including 4 Maine residents. Acquired data included names and financial account or credit/debit card numbers (with security codes/PINs). The Credit Union provided written notification and offered one year of Experian IdentityWorks services.
Maine clockDiscovered Feb 25, 2021 → Filed with AG Mar 25, 202128d ✓ ME AG ≤30d28 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_1e6f37e90209ef2eMontana State AGfiled 2021-03-25Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2462b282-1cea-495b-bf4a-1da5553972a5.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 25, 2021
- Raw hash
- 4a06fbc013744b4f9ed4d06f2575c805c988c16d6737e0b5b20728d4ebd9f423
Reporting entity
- Name
- KOHLER CREDIT UNIONnorm: kohler credit union
Victim entity
- Name
- KOHLER CREDIT UNIONnorm: kohler credit union
Incident
- Discovered
- Feb 25, 2021
- Materiality determined
- —
- Notification sent
- Mar 25, 2021
- Affected individuals
- 13,714
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 28d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 25, 2021→ Filed with AG: Mar 25, 202128d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.