MisuseFinancial ServicesFinancePrivilege AbuseEmployee Data InvolvedCustomer Data InvolvedPIIIdentity (basic)Government IDFinancialMediumContained

Golden 1 Credit Union

bd_495e6eaa941e45aa · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 27, 2015

To disclose

—

Affected

Not disclosed

Confidence

83%

Full breach record for Golden 1 Credit Union →3 incidents on file

A Golden 1 Credit Union employee employed from early April to mid-June 2015 engaged in unauthorized viewing of a small number of member accounts. Information potentially accessed included full names, Social Security numbers, driver's license numbers, and other financial information. The employee was terminated and law enforcement was notified. Affected members were offered one year of free Equifax credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Apr 7, 2015

Begins

Jul 27, 2015

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Golden 1 Credit Union
norm: golden 1 credit union

Name: Golden 1 Credit Union
norm: golden 1 credit union
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Apr 7, 2015 – Jun 17, 2015
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government IDFinancial
Data elements: Social Security number
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Internal
Regulator citations: Working with law enforcement and appropriate government agencies
Initial access: insider_action

During the incident: Terminated the employee
Continue to work with law enforcement and appropriate government agencies
Partnered with Equifax to provide Credit Watch Gold with 3-in-1 Monitoring identity theft protection product for one year at no charge
Changes made: Taken every step necessary to address the incident to date
Will continue to investigate and take any additional steps that may be required to ensure personal information is protected
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-57170
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 27, 2015
Raw hash: 9704f5439cdc03cf8efc0851b5ad3a071bda1675747d96048a93677bd2e40630

Reporting entityGolden 1 Credit Union

Victim entityGolden 1 Credit Union

IncidentInsider

Stated responseTerminated the employee

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov