HackingFinancial ServicesFinanceCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDCritical

Franklin Mint Federal Credit Union

bd_30006f193fe4bd03 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Jun 28, 2023

Filed

Jul 20, 2023

To disclose

22 days

Affected · nationwide

140,96337 in this filing

Linked

10 filings

Confidence

65%

Full breach record for Franklin Mint Federal Credit Union →2 incidents on file

Franklin Mint Federal Credit Union reported a data breach affecting 140,963 individuals. The breach, which occurred on May 31, 2023, and was discovered on June 28, 2023, involved an external system hack. Compromised information includes names and Social Security numbers. The credit union began notifying affected individuals on July 20, 2023, and offered 12 months of identity protection services through Kroll.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jun 28, 2023 → Filed with AG Jul 20, 202322d ✓ ME AG ≤30d22 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 28 days

discovery → filing · 22 days

May 31, 2023

Begins

Jun 28, 2023

Discovered

Jul 20, 2023

Filed

vs. sector median

5 wks faster

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitedispossessorbd_b80cb7caaa80cfab2023-07-15 · +5dVerified by operator
Leak Sitecl0pbd_5df843afb3ea92312023-07-10 · +10dVerified by operator

Regulatory filings (7) · sorted by filing gap

Massachusetts State AGbd_62b1c6dd574948e62023-07-20Verified
Indiana State AGbd_773bee6d81ed25e82023-07-20Verified
Delaware State AGbd_abe5990bc5581add2023-07-20Verified by operator
Montana State AGbd_ad9fe53b1998dfdc2023-07-20Verified by operator

Show 3 more filings ↓up to 7d gap

Vermont State AGbd_c86a8670fd1794342023-07-20Verified
New Hampshire State AGbd_567bc1186a84f6bc2023-07-21 · +1dVerified by operator
California State AGbd_423f190687b39d3b2023-07-27 · +7dVerified by operator

Name: Franklin Mint Federal Credit Union
norm: franklin mint federal credit union
Domain: fmfcu.org

Name: Franklin Mint Federal Credit Union
norm: franklin mint federal credit union
Domain: fmfcu.org
Industry: Financial Servicesllm

Discovered: Jun 28, 2023
Breach occurred: May 31, 2023
Undetected for: 28 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 20, 2023
Affected individuals: 140,963state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Offered 12 months of identity protection services through Kroll
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 days(22 days from discovery to filing)
Compliance flags: ME AG ≤30d · 22d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jun 28, 2023
→ Filed with AG: Jul 20, 2023
22d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jun 28, 2023 → Filed with AG: Jul 20, 2023	22d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Massachusetts State AGJul 20 · first

Indiana State AGJul 20 · first

Delaware State AGJul 20 · first

Montana State AGJul 20 · first

Vermont State AGJul 20 · first

Maine State AGJul 20 · first · this page

New Hampshire State AG+1d

California State AG+7d

Pattern: first filing Jul 20 (MA), last Jul 27 (CA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e610bdde-d212-4ac9-969f-87b9094507f4.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 20, 2023
Raw hash: 1308513ee376efbd587bd9c072e5364b99ce196fbf3ee41f039e0dcd401d74bb

Linked disclosures

Ransomware claims (2)

Regulatory filings (7) · sorted by filing gap

Reporting entityFranklin Mint Federal Credit Union

Victim entityFranklin Mint Federal Credit Union

Incidentdiscovered Jun 28, 2023

Stated responseOffered 12 months of identity protection services through Kroll

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov