MalwareFinancial ServicesFinanceRansomwareRansom DemandedData EncryptedCustomer Data InvolvedEmployee Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
PATELCO CREDIT UNION
bd_5c6d990f0a189873 · schema v1 · pii pii-v1
Full breach record for PATELCO CREDIT UNION →Patelco Credit Union suffered a ransomware attack in which an unauthorized party gained network access on May 23, 2024, with database access occurring on June 29, 2024. Discovered August 14, 2024. Approximately 726,000 individuals affected nationally, including 126 Maine residents. Compromised data included names, Social Security numbers, driver's license numbers, dates of birth, and email addresses. 24-month Experian credit monitoring offered to affected individuals.
Leak gap clock⏱ Leak >30d6 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 9 about the same incident.View merged incident
A leak claim by ransomhub about this victim predates this filing by 52 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_c9b83b21890cb423Leak Siteransomhubfiled 2024-08-16(3d gap)Verified by operator
- bd_d86fc539771c8086Leak Siteransomhubfiled 2024-06-29(52d gap)Verified by operator
Regulatory filings (6) · sorted by filing gap
- bd_272abed51034ca0cOregon State AGfiled 2024-08-20Verified
- bd_3490e911272cfc69Montana State AGfiled 2024-08-20Verified by operator
- bd_99719e822b1c011bWashington State AGfiled 2024-08-20Candidate
- bd_b0617d89cdc9b416California State AGfiled 2024-08-20Verified by operator
Show 2 more filings ↓Show fewer ↑up to 34d gap
- bd_c88dac2c250735a6Washington State AGfiled 2024-09-23(34d gap)Verified
- bd_f1d3d40e3783e96cMaine State AGfiled 2024-09-23(34d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4a259d7c-be2a-4074-a9c5-1e7f8496e9af.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 20, 2024
- Raw hash
- ee38b18dce26be6e0b17d85315502d9db198eacbddc312a99c9b268a16034113
Reporting entity
- Name
- PATELCO CREDIT UNIONnorm: patelco credit union
- Domain
- patelco.org
- Industry
- Financial Services
Victim entity
- Name
- PATELCO CREDIT UNIONnorm: patelco credit union
- Domain
- patelco.org
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Aug 14, 2024
- Materiality determined
- Aug 14, 2024
- Notification sent
- Aug 20, 2024
- Affected individuals
- 126
- Data types
- PIIIDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 6 days(6 days from discovery to filing)
- Compliance flags
- Leak >30dME AG ≤30d · 6d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 14, 2024→ Filed with AG: Aug 20, 20246d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.