HackingCustomer Data InvolvedIDENTITY_BASICLowContained
SRP Federal Credit Union ("SRP FCU")
bd_052d1ec56ee86a31 · schema v1 · pii pii-v1
Full breach record for SRP Federal Credit Union ("SRP FCU") →SRP Federal Credit Union reported a data breach impacting 7 Maine residents. The breach, which was discovered on November 22, 2024, occurred between September 5, 2024, and November 4, 2024. The incident was described as an external system breach or hacking. The company began notifying affected individuals on December 12, 2024, and offered 12 months of identity theft protection services through Experian.
Maine clockDiscovered Nov 22, 2024 → Filed with AG Dec 12, 202420d ✓ ME AG ≤30d20 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_44451beb33e5b56aLeak Sitenitrogenfiled 2024-12-05(6d gap)Verified
Regulatory filings (3) · sorted by filing gap
- bd_680347720545e521Montana State AGfiled 2024-12-12Verified by operator
- bd_3c6d257b57db9e6aMaine State AGfiled 2025-02-03(53d gap)Verified
- bd_ad44b54b9631ed6bSouth Carolina State AGfiled 2025-03-06(84d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/10844f64-85d5-4b49-b683-f9ba718f60a7.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 12, 2024
- Raw hash
- 7b378bea330e635ba56e9a632c2ef0acd8acc99ef0bd495598aafd9b34dfe2ac
Reporting entity
- Name
- SRP Federal Credit Union ("SRP FCU")norm: srp federal credit union srp fcu
- Domain
- srpfcu.org
Victim entity
- Name
- SRP Federal Credit Union ("SRP FCU")norm: srp federal credit union srp fcu
- Domain
- srpfcu.org
Incident
- Discovered
- Nov 22, 2024
- Materiality determined
- —
- Notification sent
- Dec 12, 2024
- Affected individuals
- 7
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 20 days(20 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 20d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 22, 2024→ Filed with AG: Dec 12, 202420d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.