HackingVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_BASICPIILowContained
ABNB Federal Credit Union
bd_4cd585314841e7fa · schema v1 · pii pii-v1
Full breach record for ABNB Federal Credit Union →ABNB Federal Credit Union notified Vermont AG of a third-party data breach involving Progress Software's MOVEit Transfer software. Unauthorized access occurred May 27-31, 2023, exposing member PII. No fraud evidence found. Credit monitoring offered. Vendor patched vulnerabilities.
Vermont clock✗ VT AG >45 bday10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-12-22-abnb-federal-credit-union-progress-software-moveit-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 22, 2023
- Raw hash
- 0bd99bc0ab381539d34b778f891f74d820fbb2d0000e20c003019f67ad2c25d0
Reporting entity
- Name
- ABNB Federal Credit Unionnorm: abnb federal credit union
Victim entity
- Name
- ABNB Federal Credit Unionnorm: abnb federal credit union
Incident
- Discovered
- Oct 11, 2023
- Materiality determined
- —
- Notification sent
- Dec 22, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified regulatory bodies as required
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 weeks(72 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.