UNIVERSITY FEDERAL CREDIT UNION
bd_5b896898ca06cc29 · schema v1 · pii pii-v1
Full breach record for UNIVERSITY FEDERAL CREDIT UNION →University Federal Credit Union reported a data breach affecting 29 Maine residents. The breach, which occurred between May 7 and May 27, 2023, was discovered on September 15, 2023. The incident was a result of the MOVEit Transfer vulnerability, an external system breach. The compromised information includes names in combination with financial account or credit/debit card numbers and their associated security codes or PINs. Affected individuals were notified on October 10, 2023, and offered 12 months of credit monitoring and identity theft protection services through Experian.
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_9d100ecc7e0e5184California State AGfiled 2023-10-09Verified
- bd_f0cf02b02814adccVermont State AGfiled 2023-10-10(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4998b188-69ac-4f44-b8d0-e581b31cb189.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 9, 2023
- Raw hash
- 36d01ed3ec45d6be412618e4f0b82f6c15fcd9f61553b3f39268fc5e356e2515
Reporting entity
- Name
- UNIVERSITY FEDERAL CREDIT UNIONnorm: university federal credit union
Victim entity
- Name
- UNIVERSITY FEDERAL CREDIT UNIONnorm: university federal credit union
- Industry
- Financial Services
Incident
- Discovered
- Sep 15, 2023
- Materiality determined
- —
- Notification sent
- Oct 10, 2023
- Affected individuals
- 29
- Data types
- FINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 24 days(24 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 24d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 15, 2023→ Filed with AG: Oct 9, 202324d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.