MalwareFinancial ServicesFinanceRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedRansom DemandedIdentity (basic)Government IDFinancial accountMediumContained

Georgia Heritage Federal Credit Union

bd_5b72bcb385064262 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 10, 2025

Filed

Apr 27, 2026

To disclose

15 months

Affected

12state residents only

Linked

10 filings

Confidence

66%

Full breach record for Georgia Heritage Federal Credit Union →3 incidents on file

Georgia Heritage Federal Credit Union notified the New Hampshire Attorney General of a ransomware incident occurring on or about January 25, 2025, and discovered on or about February 10, 2025. The breach affected 12 New Hampshire residents, exposing names, financial account numbers, dates of birth, and Social Security numbers. GA Heritage engaged forensic investigators, secured its network, reset credentials, and mailed notification letters on January 15, 2026, offering credit monitoring and identity theft recovery services.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d15 months discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 16 days

discovery → filing · 15 months / 441 days

Jan 25, 2025

Begins

Feb 10, 2025

Discovered

Apr 27, 2026

Filed

vs. sector median

+54 wks slower

This filing is one of 10 about the same incident.View merged incident

A leak claim by ransomhub about this victim predates this filing by 457 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Massachusetts State AGbd_cb156bc6b63d12592026-04-28 · +1dVerified
Texas State AGbd_1539035136c4ef1c2026-04-22 · +5dVerified
South Carolina State AGbd_2783e266a5f1508e2026-04-20 · +7dVerified
New Hampshire State AGbd_9b6f3394bb016a572026-04-17 · +10dVerified

Show 5 more filings ↓up to 102d gap

Vermont State AGbd_e8c28663727256b32026-04-17 · +10dVerified
Maine State AGbd_e8d6d8ccf46873e62026-04-17 · +10dVerified
New Hampshire State AGbd_21ac0ea0be3559bf2026-05-26 · +29dVerified
Nebraska State AGbd_a9f560c529b27a0b2026-01-15 · +102dCandidate
Indiana State AGbd_fd6f4db540c1cc012026-01-15 · +102dVerified

Name: Pierson Ferdinand LLP
norm: pierson ferdinand
Domain: pierferd.com

Name: Georgia Heritage Federal Credit Union
norm: georgia heritage federal credit union
Domain: gaheritagefcu.org
Industry: financial_services
Industry: Financial Servicesllm

Discovered: Feb 10, 2025
Breach occurred: Jan 25, 2025
Undetected for: 16 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 15, 2026
Affected individuals: 12state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General's Office
Initial access: valid_credentials

During the incident: Engaged a specialized third-party cybersecurity firm to conduct a comprehensive investigation
Engaged a data mining vendor to review the accessed files
Secured its network
Changed all user credentials
Enhanced the security measures
Mailed notification letters to affected residents via USPS First Class Mail
Offered complimentary identity protection services, including 12 months of credit monitoring through CyEx Financial Shield Complete with Experian
Offered fully managed identity theft recovery services through HaystackID
Changes made: Implemented additional security measures to secure its environment
Changed all user credentials
Enhanced the security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 months(441 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 8 states

View merged incident ↗

Nebraska State AGJan 15 · first

Indiana State AGJan 15 · first

New Hampshire State AG+92d

Vermont State AG+92d

Maine State AG+92d

South Carolina State AG+95d

Texas State AG+97d

New Hampshire State AG+102d · this page

Massachusetts State AG+103d

New Hampshire State AG+131d

Pattern: first filing Jan 15 (NE), last May 26 (NH) — a 131-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/georgia-heritage-federal-credit-union-20260427.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 27, 2026
Raw hash: 9f3873531b9946112186d68c37a42475442fe9485ec505237be3543d62c6baff

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityPierson Ferdinand LLP

Victim entityGeorgia Heritage Federal Credit Union

Incidentdiscovered Feb 10, 2025

Stated responseEngaged a specialized third-party cybersecurity firm to conduct a comprehensive investigation

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov