HackingData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
AOD Federal Credit Union
bd_58c00161d459e445 · schema v1 · pii pii-v1
Full breach record for AOD Federal Credit Union →AOD Federal Credit Union notified consumers of a data breach detected on August 9, 2024. Unauthorized access occurred between August 8-9, 2024, potentially exposing personal information including names and government IDs. The FBI was notified, and forensic investigators were engaged. The credit union offered complimentary credit monitoring services to affected individuals.
Vermont clock✗ VT AG >45 bday33 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_f328328d752148aaIndiana State AGfiled 2025-03-27Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-03-27-aod-federal-credit-union-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 27, 2025
- Raw hash
- 878bb556a55ab04bd5e0aaa61054f0535d18aedc07b37e4b2b97bb2b49a17c38
Reporting entity
- Name
- AOD Federal Credit Unionnorm: aod federal credit union
Victim entity
- Name
- AOD Federal Credit Unionnorm: aod federal credit union
Incident
- Discovered
- Aug 9, 2024
- Materiality determined
- —
- Notification sent
- Mar 27, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Reported the incident to the Federal Bureau of Investigation
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 33 weeks(230 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.