HackingCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHighContained
Broadview Federal Credit Union
bd_054fde74d4c97abf · schema v1 · pii pii-v1
Full breach record for Broadview Federal Credit Union →Broadview Federal Credit Union experienced an external system breach (hacking) on 06/01/2023, discovered on 11/03/2023. Approximately 5,074 individuals were affected, including 5 Maine residents. Stolen data included names, personal identifiers, and financial account or credit/debit card numbers (with security codes/PINs). The credit union notified consumers on 11/30/2023 and offered 24 months of identity theft protection services.
Maine clockDiscovered Nov 3, 2023 → Filed with AG Nov 30, 202327d ✓ ME AG ≤30d27 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_303f0e6d4f0868feNew Hampshire State AGfiled 2023-11-30Verified
- bd_d8c5f82f5b6b435fVermont State AGfiled 2023-11-30Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1306dcd9-838a-4d8a-a339-b3b4711283e3.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 30, 2023
- Raw hash
- 0dee75e3071b23b47a956e275e0ecfe329f15e60a3a2958a25f30f48ec8b246e
Reporting entity
- Name
- Broadview Federal Credit Unionnorm: broadview federal credit union
Victim entity
- Name
- Broadview Federal Credit Unionnorm: broadview federal credit union
Incident
- Discovered
- Nov 3, 2023
- Materiality determined
- —
- Notification sent
- Nov 30, 2023
- Affected individuals
- 5,074
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 27 days(27 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 27d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 3, 2023→ Filed with AG: Nov 30, 202327d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.