MalwareGovernment IDIdentity (basic)Financial accountMediumContained

Community Choice Credit Union

bd_0c686a605e22ee9b · schema v1 · pii pii-v2

Severity

Medium

Discovered

May 28, 2025

Filed

Jul 1, 2025

To disclose

—

Affected

Not disclosed

Linked

4 filings

Confidence

66%

Full breach record for Community Choice Credit Union →

Community Choice Credit Union experienced a cybersecurity incident on May 25, 2025, involving unauthorized encryption of files (ransomware). The breach potentially exposed names, Social Security numbers, and account numbers. The company engaged forensic investigators, reported to law enforcement, and offered one year of Experian IdentityWorks credit monitoring to affected individuals. Notices were sent starting June 1, 2025.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d

Incident timeline

undetected · 3 days

May 25, 2025

Begins

May 28, 2025

Discovered

Jul 1, 2025

Filed

This filing is one of 4 about the same incident.View merged incident

A leak claim by play about this victim predates this filing by 34 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_b6f7e892c1c665f62025-05-28 · +34dVerified by operator

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_a7d056bca22e9ee12025-07-01Verified by operator
Maine State AGbd_f41a22cd0e4fc9722025-07-01Verified

Name: Community Choice Credit Union
norm: community choice credit union
Domain: yourbetterbankingchoice.com

Name: Community Choice Credit Union
norm: community choice credit union
Domain: yourbetterbankingchoice.com

Discovered: May 28, 2025
Breach occurred: May 25, 2025
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 1, 2025
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)Financial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Engaged a leading forensic security firm to assist in our investigation and confirm the security of our computer systems and network
Reported the incident to law enforcement
Offering a free one-year membership of Experian IdentityWorks SM Credit 3B
Changes made: Enhancing our technical security measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGJul 1 · first

Maine State AGJul 1 · first

Nebraska State AGJul 1 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/0746952f-3a61-4fc9-8ce0-4b8eefd13529.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 1, 2025
Raw hash: cd8b44e88a28be2ac04e44873f07e906e19118aa51213339658f1c97a628f51a

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityCommunity Choice Credit Union

Victim entityCommunity Choice Credit Union

Incidentdiscovered May 28, 2025

Stated responseEngaged a leading forensic security firm to assist in our investigation and confirm the security of our computer systems and network

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov