UnknownFinancial ServicesFinanceGovernment IDFinancial accountMedium

South Bay Credit Union

bd_28b9c45860b8a046 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 14, 2025

To disclose

—

Affected

7state residents only

Linked

7 filings

Confidence

95%

Full breach record for South Bay Credit Union →

South Bay Credit Union reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-05-14. 7 Massachusetts residents were affected.

J jump to incidentP pin to compareR raw source

Massachusetts clock✓ MA credit monitoring due

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

May 14, 2025

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Vermont State AGbd_08a74b1806c29f8f2025-05-14Verified
Nebraska State AGbd_48a00e0afe054afa2025-05-13 · +1dVerified
Indiana State AGbd_99daa838a9f34a3d2025-05-13 · +1dVerified
California State AGbd_be8aa70e9935fd482025-05-13 · +1dCandidate

Show 2 more filings ↓up to 2d gap

Maine State AGbd_d3138b4a5b9dfc1e2025-05-13 · +1dVerified
New Hampshire State AGbd_abc8380b4c4f53402025-05-16 · +2dVerified

Name: South Bay Credit Union
norm: south bay credit union
Domain: southbaycu.com

Name: South Bay Credit Union
norm: south bay credit union
Domain: southbaycu.com
Industry: Financial Servicesregulator portal

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 7state-resident count only
Data types: Government IDFinancial account
Data elements: Social Security numberFinancial account number
Stated not affected: Medical informationDriver's licence numberPayment card number
The filing states these were not involved. Categories absent from both lists were not addressed either way.
Attack vector: Unknown

Compliance flags: MA credit monitoring due
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Nebraska State AGMay 13 · first

Indiana State AGMay 13 · first

California State AGMay 13 · first

Maine State AGMay 13 · first

Vermont State AG+1d

Massachusetts State AG+1d · this page

New Hampshire State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/data-breach-report-2025/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 14, 2025
Raw hash: 0444185d05d1b1fc26e7945e9c66fca2f9034f34e9309d5df8b1d55a393551a9

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entitySouth Bay Credit Union

Victim entitySouth Bay Credit Union

IncidentUnknown

ComplianceMA credit monitoring due

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov