1ST MIDAMERICA CREDIT UNION
bd_4a0e035dbcce10e1 · schema v1 · pii pii-v1
Full breach record for 1ST MIDAMERICA CREDIT UNION →1st MidAmerica Credit Union (MACU) reported a data breach involving its vendor, Marquis Software Solutions. On August 14, 2025, Marquis identified suspicious activity indicating unauthorized access to its computing environment. The breach affected the personal information (names and Social Security Numbers) of 7 New Hampshire residents. MACU was notified by Marquis in October 2025 and confirmed the data involvement in November 2025. Notification letters were mailed to affected individuals on January 22, 2026, offering 24 months of credit monitoring. The incident is considered contained.
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_30a6ecedbb016c46Texas State AGfiled 2026-02-02Verified
- bd_275f4715bec7cc1dMaine State AGfiled 2026-01-30(3d gap)Verified
- bd_d41974d707bdedf7Vermont State AGfiled 2026-01-30(3d gap)Verified
- bd_76d756860b4047a3Indiana State AGfiled 2026-01-22(11d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/first-midamerica-credit-union-20260202.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 2, 2026
- Raw hash
- f0f87737e8224275ec6625f75dfef03bcb1c34a8916167890037fd1fa42f2237
Reporting entity
- Name
- Kennedys CMK LLPnorm: kennedys cmk
Victim entity
- Name
- 1ST MIDAMERICA CREDIT UNIONnorm: 1st midamerica credit union
- Industry
- financial_services
Incident
- Discovered
- Aug 14, 2025
- Materiality determined
- —
- Notification sent
- Jan 22, 2026
- Affected individuals
- 7
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General's Office
- Third party
- via Marquis Software Solutions
- Initial access
- supply_chain
Compliance
- Time to disclose
- 25 weeks(172 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.