PhysicalFinancial ServicesFinanceSkimmerTargetedCustomer Data InvolvedFinancial accountFinancial credentialsIdentity (basic)PIILowContained

Boeing Employees Credit Union

bd_5c00e406a0db6064 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 9, 2021

Filed

Nov 22, 2021

To disclose

6 weeks

Affected

657state residents only

Confidence

71%

Full breach record for Boeing Employees Credit Union →7 incidents on file

Boeing Employees Credit Union (BECU) notified Washington AG of a data security incident involving skimming devices installed on four ATMs between Oct 9-15, 2021. Approximately 657 Washington residents were affected. Compromised data included names, card numbers, CVVs, magnetic stripe data, PINs, and expiration dates. BECU disabled impacted cards, reversed fraudulent transactions, and notified regulators and law enforcement.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d6 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 6 weeks / 44 days

Oct 9, 2021

Begins

Oct 9, 2021

Discovered

Nov 22, 2021

Filed

vs. sector median

3 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed657 affectedView incident

Name: Boeing Employees Credit Union
norm: boeing employees credit union
Domain: becu.org

Name: Boeing Employees Credit Union
norm: boeing employees credit union
Domain: becu.org
Industry: Financial Servicesllm

Discovered: Oct 9, 2021
Breach occurred: Oct 9, 2021 – Oct 15, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 22, 2021
Affected individuals: 657state-resident count only
Data types: Financial accountFinancial credentialsPII
Data elements: NameFinancial account number
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoing
Attack vector: Unknown
MITRE ATT&CK: T1530 Data from Cloud Storage Object
Threat actor: ExternalFinancial
Regulator citations: Notifying Washington DFINotifying NCUACooperating with law enforcement

During the incident: Used existing fraud detection technology to help identify and decline potentially fraudulent transactions
Turned off all potentially impacted cards and reached out to those members so they may obtain new cards and PINs
Reversed unauthorized transactions, credited the amount(s) to the affected account and issued a new card
Provided members who used the affected ATM during the timeframe listed above with written notice
Notifying primary regulators, Washington DFI and NCUA
Notifying applicable payment brands
Notified and is cooperating with law enforcement
Changes made: Bolster ATM security using information uncovered during the investigation
Increase security of ATMs to keep up with industry standards and evolving threats
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(44 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM11238.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 22, 2021
Raw hash: fc71f4fc164ccbd524df97e23c73764152f5684f8d4cccebc2a204ad34717325

Reporting entityBoeing Employees Credit Union

Victim entityBoeing Employees Credit Union

Incidentdiscovered Oct 9, 2021

Stated responseUsed existing fraud detection technology to help identify and decline potentially fraudulent transactions

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com