HackingFinancial ServicesFinanceCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowContained
SRP Federal Credit Union ("SRP FCU")
bd_3c6d257b57db9e6a · schema v1 · pii pii-v1
Full breach record for SRP Federal Credit Union ("SRP FCU") →SRP Federal Credit Union detected unauthorized access to its computer network between September 5 and November 4, 2024. An unknown third party accessed systems and potentially exfiltrated files containing members' personal information. Discovery occurred November 22, 2024. 260,950 total individuals affected; 40 Maine residents. The online banking and core processing systems were not impacted. One year of Experian IdentityWorks Credit 3B monitoring was offered to affected individuals.
Maine clockDiscovered Nov 22, 2024 → Filed with AG Feb 3, 202573d ⏱ ME AG >30d10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by nitrogen about this victim predates this filing by 59 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_44451beb33e5b56aLeak Sitenitrogenfiled 2024-12-05(59d gap)Verified
Regulatory filings (3) · sorted by filing gap
- bd_ad44b54b9631ed6bSouth Carolina State AGfiled 2025-03-06(31d gap)Verified by operator
- bd_052d1ec56ee86a31Maine State AGfiled 2024-12-12(53d gap)Verified
- bd_680347720545e521Montana State AGfiled 2024-12-12(53d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1f4ef31b-38bd-46d1-8660-a90b4d10efe2.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 3, 2025
- Raw hash
- 38481da50a6af9cb6aab808eccf8a340ff54840bf28615ed236697760bff14c7
Reporting entity
- Name
- SRP Federal Credit Union ("SRP FCU")norm: srp federal credit union srp fcu
- Domain
- srpfcu.org
- Industry
- Financial Services
Victim entity
- Name
- SRP Federal Credit Union ("SRP FCU")norm: srp federal credit union srp fcu
- Domain
- srpfcu.org
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Nov 22, 2024
- Materiality determined
- —
- Notification sent
- Dec 12, 2024
- Affected individuals
- 40
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney General
Compliance
- Time to disclose
- 10 weeks(73 days from discovery to filing)
- Compliance flags
- ME AG >30d · 73dLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 22, 2024→ Filed with AG: Feb 3, 202573d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.