HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHIMediumContained
CARTER FEDERAL CREDIT UNION
bd_2424670b314bd855 · schema v1 · pii pii-v1
Full breach record for CARTER FEDERAL CREDIT UNION →Carter Federal Credit Union reported a data security incident to the New Hampshire Attorney General on August 29, 2025. An unauthorized third party gained temporary access to the network between June 25 and July 2, 2025. The breach affected 101 New Hampshire residents, exposing names, SSNs, driver's license numbers, credit/debit card numbers, financial account details, and limited medical information. Carter engaged forensic investigators, notified law enforcement, and offered one year of complimentary credit monitoring to affected individuals.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_45d1b98cee446fb7California State AGfiled 2025-08-29Candidate
- bd_cce49a2b0ac7837bMaine State AGfiled 2025-08-29Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/carter-federal-credit-union-20250829.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 29, 2025
- Raw hash
- 32f220700f2eed7226e1f5d8b1d72ead22bba7f872b712a0c889b06bf1526879
Reporting entity
- Name
- CARTER FEDERAL CREDIT UNIONnorm: carter federal credit union
Victim entity
- Name
- CARTER FEDERAL CREDIT UNIONnorm: carter federal credit union
Incident
- Discovered
- Jul 2, 2025
- Materiality determined
- —
- Notification sent
- Aug 29, 2025
- Affected individuals
- 101
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(58 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.