HackingCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHIHEALTH_BASICMediumContained
OE Federal Credit Union
bd_13ffb6f7f84418cf · schema v1 · pii pii-v1
Full breach record for OE Federal Credit Union →OE Federal Credit Union detected unauthorized access to its network on October 28, 2023. A forensic investigation determined that an unauthorized party accessed or acquired files containing personal information between August 19, 2023, and October 29, 2023. The incident potentially affected residents of California and several other states. The credit union engaged external cybersecurity professionals, secured its network, and offered 12 months of complimentary identity monitoring to affected individuals.
Leak gap clock✗ Leak >180d26 weeks discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_195ac9680f382b80Montana State AGfiled 2024-04-30Candidate
- bd_5e779dd08ad7d768Washington State AGfiled 2024-04-30Verified
- bd_a89563f40ff80881Vermont State AGfiled 2024-04-30Verified
- bd_6c93b213b362f468Oregon State AGfiled 2024-05-02(2d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-584667
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 30, 2024
- Raw hash
- 73e828853d2eaecfdab32ba72e5b72ddd13bd2beae78232ccebff239c11e463c
Reporting entity
- Name
- OE Federal Credit Unionnorm: oe federal credit union
- Domain
- oefederal.org
Victim entity
- Name
- OE Federal Credit Unionnorm: oe federal credit union
- Domain
- oefederal.org
Incident
- Discovered
- Oct 28, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHIHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 26 weeks(185 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.