MalwareFinancial ServicesFinanceRansomwareSupply Chain (3P Vendor)Data ExfiltratedGovernment IDFinancial accountIdentity (basic)MediumActive

INTOUCH CREDIT UNION

bd_3ce565c9cdcbfc62 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 10, 2017

Filed

Nov 8, 2017

To disclose

29 days

Affected

6state residents only

Linked

3 filings

Confidence

65%

Full breach record for INTOUCH CREDIT UNION →2 incidents on file

InTouch Credit Union notified members of a ransomware attack on a third-party data analytics vendor. Unauthorized access to member data (SSN, financial accounts, names) may have occurred between July 2 and October 10, 2017. Notification sent November 8, 2017. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 100 days

discovery → filing · 29 days

Jul 2, 2017

Begins

Oct 10, 2017

Discovered

Nov 8, 2017

Filed

vs. sector median

4 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_8ceae4a6ea1662df2017-11-08Verified
New Hampshire State AGbd_c0b50cd5d6fb73202017-11-08Verified

Name: INTOUCH CREDIT UNION
norm: intouch credit union

Name: INTOUCH CREDIT UNION
norm: intouch credit union
Industry: Financial Servicesllm

Discovered: Oct 10, 2017
Breach occurred: Jul 2, 2017 – Oct 10, 2017
Undetected for: 100 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 8, 2017
Affected individuals: 6state-resident count only
Data types: Government IDFinancial accountIdentity (basic)
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Regulator citations: Notifying state and federal regulators and consumer reporting agencies of this incident
Initial access: supply_chain

During the incident: Launched an investigation to determine what happened and what information may have been accessed
Offering complimentary access to 12 months of free credit monitoring and identity restoration services with AllClear ID
Notifying state and federal regulators and consumer reporting agencies of this incident
Reviewing vendor contracts to reduce the likelihood that an incident like this will happen in the future
Changes made: Reviewing vendor contracts to reduce the likelihood that an incident like this will happen in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGNov 8 · first

New Hampshire State AGNov 8 · first

Montana State AGNov 8 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/InTouch-Credit-Union.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 8, 2017
Raw hash: c7a2a53d0fea11b3235b7be0957c86e0ccdd7d64572d6466335cf5f084584171

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityINTOUCH CREDIT UNION

Victim entityINTOUCH CREDIT UNION

Incidentdiscovered Oct 10, 2017

Stated responseLaunched an investigation to determine what happened and what information may have been accessed

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov