Abbott Laboratories Employees Credit Union
bd_4447938441305d18 · schema v1 · pii pii-v1
Full breach record for Abbott Laboratories Employees Credit Union →Abbott Laboratories Employees Credit Union (ALEC) reported a data security incident to the New Hampshire Attorney General. On August 2, 2024, ALEC discovered suspicious activity in an employee email account, likely resulting from a phishing attack. An unauthorized third party accessed the account and may have acquired personal information of certain individuals, including New Hampshire and Rhode Island residents. ALEC secured the account, engaged forensic investigators, notified law enforcement, and offered one year of complimentary credit monitoring via Experian IdentityWorks.
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_318a60fda9c1e768Montana State AGfiled 2024-10-18Candidate
- bd_41c6030380ba7cd3Vermont State AGfiled 2024-10-18Verified
- bd_d237ee2f8cd21c1eIndiana State AGfiled 2024-10-18Verified
- bd_dc7afc90f9264499California State AGfiled 2024-10-18Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/abbott-laboratories-employees-credit-union-20241018.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 18, 2024
- Raw hash
- 8b3b495bce2c822cad9ba09e9f3b81bc392d56309c877e5add69996aa078ce06
Reporting entity
- Name
- Abbott Laboratories Employees Credit Unionnorm: abbott laboratories employees credit union
Victim entity
- Name
- Abbott Laboratories Employees Credit Unionnorm: abbott laboratories employees credit union
Incident
- Discovered
- Aug 2, 2024
- Materiality determined
- Sep 23, 2024
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Attorney General of the State of New Hampshire
- Initial access
- phishing_link
Compliance
- Time to disclose
- 11 weeks(77 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.