HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICLowContained
LA Financial Federal Credit Union
bd_34aaaafd7e286a9e · schema v1 · pii pii-v1
Full breach record for LA Financial Federal Credit Union →LA Financial Federal Credit Union discovered unauthorized access to an employee email account on June 10, 2024. The incident involved potential exposure of customer names and other personal information. The credit union secured its systems, engaged forensic specialists, and offered credit monitoring to affected individuals. No evidence of misuse was found.
California clockDiscovered Jun 10, 2024 → Notified Nov 27, 2024170d ✗ CA 60-day late25 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_06735563815a9497New Hampshire State AGfiled 2024-09-13(81d gap)Verified
- bd_13092a069e2fc724California State AGfiled 2024-09-13(81d gap)Verified
- bd_cb2920f77dc693a3Montana State AGfiled 2024-09-12(82d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-595600
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 3, 2024
- Raw hash
- c8a274c6cba38412f63c9fa9d6696a0b8bd5f651b951c2c21307cfbff72a43d2
Reporting entity
- Name
- LA Financial Federal Credit Unionnorm: la financial federal credit union
Victim entity
- Name
- LA Financial Federal Credit Unionnorm: la financial federal credit union
Incident
- Discovered
- Jun 10, 2024
- Materiality determined
- —
- Notification sent
- Nov 27, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 25 weeks(176 days from discovery to filing)
- Compliance flags
- CA 60-day late · 170d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 10, 2024→ Notified: Nov 27, 2024170d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.