HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICLowContained
LA Financial Federal Credit Union
bd_13092a069e2fc724 · schema v1 · pii pii-v1
Full breach record for LA Financial Federal Credit Union →LA Financial Federal Credit Union reported unauthorized access to an employee email account discovered on June 10, 2024. The incident involved potential exposure of customer names and other personal information. The credit union engaged forensic specialists, secured its systems, and offered credit monitoring to affected individuals.
California clockDiscovered Jun 10, 2024 → Notified Sep 11, 202493d ✗ CA 60-day late14 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_06735563815a9497New Hampshire State AGfiled 2024-09-13Verified
- bd_cb2920f77dc693a3Montana State AGfiled 2024-09-12(1d gap)Candidate
- bd_34aaaafd7e286a9eCalifornia State AGfiled 2024-12-03(81d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-591649
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 13, 2024
- Raw hash
- 94bc75bfdfcb2505be342a96a5a15cecf79b8032186500a6732012467d34defc
Reporting entity
- Name
- LA Financial Federal Credit Unionnorm: la financial federal credit union
Victim entity
- Name
- LA Financial Federal Credit Unionnorm: la financial federal credit union
Incident
- Discovered
- Jun 10, 2024
- Materiality determined
- —
- Notification sent
- Sep 11, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 14 weeks(95 days from discovery to filing)
- Compliance flags
- CA 60-day late · 93d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 10, 2024→ Notified: Sep 11, 202493d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.