HackingStolen CredentialsTargetedIDENTITY_BASICCREDENTIALSLowContained
Abbott Laboratories Employees Credit Union
bd_41c6030380ba7cd3 · schema v1 · pii pii-v1
Full breach record for Abbott Laboratories Employees Credit Union →Abbott Laboratories Employees Credit Union (ALEC) notified consumers of a data breach where an unauthorized third party accessed a single employee email account on August 2, 2024. The attacker may have acquired personal information including names and other data elements. ALEC secured the account, engaged forensic investigators, and offered one year of Experian IdentityWorks credit monitoring. The total number of affected individuals was not disclosed in the filing.
Vermont clock✗ VT AG >45 bday11 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_318a60fda9c1e768Montana State AGfiled 2024-10-18Candidate
- bd_4447938441305d18New Hampshire State AGfiled 2024-10-18Verified
- bd_d237ee2f8cd21c1eIndiana State AGfiled 2024-10-18Verified
- bd_dc7afc90f9264499California State AGfiled 2024-10-18Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-10-18-abbott-laboratories-employees-credit-union-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 18, 2024
- Raw hash
- f9cade99daeb8879c6d07518375ca3af74a99541e66842283a6b6dbae07d4c76
Reporting entity
- Name
- Abbott Laboratories Employees Credit Unionnorm: abbott laboratories employees credit union
Victim entity
- Name
- Abbott Laboratories Employees Credit Unionnorm: abbott laboratories employees credit union
Incident
- Discovered
- Aug 2, 2024
- Materiality determined
- —
- Notification sent
- Oct 18, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 11 weeks(77 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.