Bayer Heritage Federal Credit Union
bd_5b5aa7ccc8c9028d · schema v1 · pii pii-v1
Full breach record for Bayer Heritage Federal Credit Union →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Lorenz on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Dec 1, 2023
Claim posted
—
Corroborated · see linked filings
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Maine State AGbd_46a9d4d2157948362024-02-06 · +67dVerified by operator
- Massachusetts State AGbd_60b382d4082914f92024-02-06 · +67dVerified by operator
- Montana State AGbd_611ddf21b7468fd42024-02-06 · +67dVerified by operator
- New Hampshire State AGbd_fd262f0a9dde34282024-02-08 · +69dVerified
Show 1 more filing ↓Show fewer ↑up to 119d gap
- Maine State AGbd_616d6833f0ce10662024-03-29 · +119dVerified
Filing propagation · 6 filings · 4 states
View merged incident ↗Pattern: first filing Dec 1, last Mar 29 (ME) — a 119-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
lorenz
According to ransomware.live, Tesorion describes Lorenz as a ransomware with design and implementation flaws, leading to impossible decryption with tools provided by the attackers. A free decryptor for 2021 versions was made available via the NoMoreRansom initiative. A new version of the malware was discovered in March 2022, for which again was provided a free decryptor, while the ransomware operators are not able to provide tools to decrypt affected files.