PhysicalFinancial ServicesFinanceSkimmerTargetedCustomer Data InvolvedFinancial accountFinancial credentialsIdentity (basic)PIILowContained

Boeing Employees Credit Union

bd_20938690bfebba6e · schema v1 · pii pii-v1

Severity

Low

Financial impact

$76K

Discovered

Apr 30, 2022

Filed

May 26, 2022

To disclose

26 days

Affected · nationwide

720717 in this filing

Confidence

70%

Full breach record for Boeing Employees Credit Union →7 incidents on file

Boeing Employees' Credit Union (BECU) notified the Washington AG of an ATM skimming incident in Renton, WA. A skimmer was installed between March 26 and April 2, 2022. BECU discovered the fraud pattern on April 30, 2022. Approximately 720 members were affected (717 WA residents), with data including card numbers, CVV, PINs, and names compromised. BECU refunded ~$75,680 in fraud, replaced cards, and notified law enforcement.

J jump to incidentP pin to compareR raw source

Washington clock✓ WA AG ≤30d26 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 35 days

discovery → filing · 26 days

Mar 26, 2022

Begins

Apr 30, 2022

Discovered

May 26, 2022

Filed

vs. sector median

6 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed720 affectedView incident

Name: Boeing Employees Credit Union
norm: boeing employees credit union
Domain: becu.org

Name: Boeing Employees Credit Union
norm: boeing employees credit union
Domain: becu.org
Industry: Financial Servicesllm

Discovered: Apr 30, 2022
Breach occurred: Mar 26, 2022 – Apr 2, 2022
Undetected for: 35 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 16, 2022
Affected individuals: 720state + nationwide
Data types: Financial accountFinancial credentialsPII
Data elements: NameFinancial account number
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found after the fact
Attack vector: Unknown
MITRE ATT&CK: T1530 Data from Cloud Storage ObjectT1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Attorney GeneralCooperating with law enforcement

During the incident: Used existing fraud detection technology to help identify and decline potentially fraudulent transactions
Turned off all potentially impacted cards
Reached out to members so they may obtain new cards and PINs
Reversed unauthorized transactions and credited affected accounts
Issued new cards to affected members
Notified and cooperating with law enforcement
Notified applicable payment brands
Changes made: Bolster ATM security using information uncovered during investigation
Routinely take steps to increase security of ATMs to keep up with industry standards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 days(26 days from discovery to filing)
Compliance flags: WA AG ≤30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM13646.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 26, 2022
Raw hash: c10c97a750115fd8547e176efae051b1aa91ed9877df513bc9bd7e7dfdecad11

Reporting entityBoeing Employees Credit Union

Victim entityBoeing Employees Credit Union

Incidentdiscovered Apr 30, 2022

Stated responseUsed existing fraud detection technology to help identify and decline potentially fraudulent transactions

ComplianceWA AG ≤30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com