MalwareFinancial ServicesFinanceRansomwareData EncryptedTargetedIdentity (basic)Government IDFinancial accountHealth (basic)EmploymentHighContained

Georgia Heritage Federal Credit Union

bd_2783e266a5f1508e · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 25, 2025

Filed

Apr 20, 2026

To disclose

15 months

Affected

1,945state residents only

Linked

11 records

Confidence

65%

Full breach record for Georgia Heritage Federal Credit Union →

Georgia Heritage Federal Credit Union notified South Carolina AG of a ransomware incident occurring on Jan 25, 2025. Unauthorized access may have exposed PII including SSNs, DOBs, driver's licenses, financial account info, and health data. The credit union engaged forensic investigators, secured its network, changed credentials, and offered 12 months of credit monitoring. No evidence of misuse found. Notification sent March 26, 2026.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d15 months discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 15 months / 450 days

Jan 25, 2025

Begins

Jan 25, 2025

Discovered

Apr 20, 2026

Filed

vs. sector median

+56 wks slower

This filing is one of 11 records about the same incident.View merged incident

A leak claim by ransomhub about this victim was first seen 440 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteransomhubbd_bab1b5b5b53d3c342025-01-25 · +450dVerified by operator

Regulatory filings (9) · sorted by filing gap

Texas State AGbd_1539035136c4ef1c2026-04-22 · +2dVerified
New Hampshire State AGbd_9b6f3394bb016a572026-04-17 · +3dVerified
Vermont State AGbd_e8c28663727256b32026-04-17 · +3dVerified
Maine State AGbd_e8d6d8ccf46873e62026-04-17 · +3dVerified

Show 5 more filings ↓up to 95d gap

New Hampshire State AGbd_5b72bcb3850642622026-04-27 · +7dVerified
Massachusetts State AGbd_cb156bc6b63d12592026-04-28 · +8dVerified
New Hampshire State AGbd_21ac0ea0be3559bf2026-05-26 · +36dVerified
Nebraska State AGbd_a9f560c529b27a0b2026-01-15 · +95dCandidate
Indiana State AGbd_fd6f4db540c1cc012026-01-15 · +95dVerified

Name: Georgia Heritage Federal Credit Union
norm: georgia heritage federal credit union
Domain: gaheritagefcu.org

Name: Georgia Heritage Federal Credit Union
norm: georgia heritage federal credit union
Domain: gaheritagefcu.org
Industry: Financial Servicesllm

Discovered: Jan 25, 2025
Breach occurred: Jan 25, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 26, 2026
Affected individuals: 1,945state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)Employment
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial

During the incident: Secured its network
Engaged a specialized third-party cybersecurity firm to conduct a comprehensive investigation
Engaged a data mining vendor to review the accessed files
Changed all user credentials
Enhanced the security measures
Providing you with access to CyEx Financial Shield Complete with Experian Single Bureau Credit Monitoring services at no charge
Providing you with proactive fraud assistance
Changes made: Changed all user credentials
Enhanced the security measures
Took steps and will continue to take steps to mitigate the risk of a similar event occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 months(450 days from discovery to filing)
Compliance flags: Leak >180dSC CRA notice due
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 8 states

View merged incident ↗

Nebraska State AGJan 15 · first

Indiana State AGJan 15 · first

New Hampshire State AG+92d

Vermont State AG+92d

Maine State AG+92d

South Carolina State AG+95d · this page

Texas State AG+97d

New Hampshire State AG+102d

Massachusetts State AG+103d

New Hampshire State AG+131d

Pattern: first filing Jan 15 (NE), last May 26 (NH) — a 131-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2026/Consumer%20Letter%20-%20Georgia%20Heritage%20Federal%20Credit%20Union.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 20, 2026
Raw hash: d37ba28f866a57383510aa6672226c1a4d8da1aaf5dfb7907e45e66de332d933

Linked disclosures

Ransomware claims (1)

Regulatory filings (9) · sorted by filing gap

Reporting entityGeorgia Heritage Federal Credit Union

Victim entityGeorgia Heritage Federal Credit Union

Incidentdiscovered Jan 25, 2025

Stated responseSecured its network

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov