MisuseFinancial ServicesFinanceData MishandlingMisuse OtherEmployee Data InvolvedCustomer Data InvolvedData ExfiltratedPIIIdentity (basic)Government IDMediumContained

Premier Credit Union

bd_6065f37bf90c7d0f · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 22, 2016

To disclose

—

Affected

Not disclosed

Confidence

81%

Full breach record for Premier Credit Union →2 incidents on file

A departing Premier America Credit Union employee emailed member lists containing personal information — including names, addresses, and SSNs or EINs — to a personal account in late June 2016, in violation of company policy. The incident was believed to be for solicitation purposes. Affected members were notified on September 22, 2016 and offered one year of complimentary Experian identity theft protection.

J jump to incidentP pin to compareR raw source

Incident timeline

Jun 1, 2016

Begins

Sep 22, 2016

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Premier Credit Union
norm: premier credit union
Domain: my.premiercu.org

Name: Premier Credit Union
norm: premier credit union
Domain: my.premiercu.org
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Jun 1, 2016 – Jun 29, 2016
Materiality determined: —
Notification sent: Sep 22, 2016
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government ID
Data elements: Social Security number
Attack vector: Insider
Threat actor: Internal
Initial access: insider_action

During the incident: Taking additional measures to remind this employee of his obligations that the employee not use your personal information for any reason
Continuing to investigate and respond accordingly to ensure your personal information is secure
Partnered with Experian to provide complimentary identity theft protection for one year for affected members whose social security number was compromised
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-64011
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 22, 2016
Raw hash: cba93e91c5cb7febbef98f9f4570e9c7243fc5f8f3727916e9573fc8257db112

Reporting entityPremier Credit Union

Victim entityPremier Credit Union

IncidentInsider

Stated responseTaking additional measures to remind this employee of his obligations that the employee not use your personal information for any reason

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov