DisclosureLens
HackingFinancial ServicesFinanceCustomer Data InvolvedTargetedGovernment IDIdentity (basic)HighContained

Circle Federal Credit Union

bd_335f955da2e67a64 · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 16, 2022

Filed

May 4, 2022

To disclose

11 weeks

Affected · nationwide

5,5921 in this filing

Linked

3 filings

Confidence

66%
Full breach record for Circle Federal Credit Union →

Circle Federal Credit Union experienced an external system breach (hacking) between January 27-28, 2022, discovered on February 16, 2022. The incident affected 5,592 individuals, including 1 Maine resident. Compromised data included names and driver's license numbers. The credit union notified consumers in writing on May 4, 2022, and offered 24 months of credit monitoring through Experian.

Maine clockDiscovered Feb 16, 2022 → Filed with AG May 4, 202277d ⏱ ME AG >30d11 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 20 days
discovery → filing · 11 weeks / 77 days

Jan 27, 2022

Begins

Feb 16, 2022

Discovered

May 4, 2022

Filed

vs. sector median

+2 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Indiana State AGMay 4 · first
Massachusetts State AGMay 4 · first
Maine State AGMay 4 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.