HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)PIILowContained

Bayer Heritage Federal Credit Union

bd_611ddf21b7468fd4 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 1, 2023

Filed

Feb 6, 2024

To disclose

14 weeks

Affected

7state residents only

Linked

6 filings

Confidence

66%

Full breach record for Bayer Heritage Federal Credit Union →

Bayer Heritage Federal Credit Union notified Montana residents of unauthorized access to computer systems between Oct 31 and Nov 1, 2023. Files containing names and other personal info were acquired. The credit union engaged forensic investigators, contained the incident, and offered one year of Experian IdentityWorks credit monitoring. No misuse of information has been confirmed.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d14 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 1 days

discovery → filing · 14 weeks / 97 days

Oct 31, 2023

Begins

Nov 1, 2023

Discovered

Feb 6, 2024

Filed

vs. sector median

+5 wks slower

This filing is one of 6 about the same incident.View merged incident

A leak claim by lorenz about this victim predates this filing by 67 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelorenzbd_5b5aa7ccc8c9028d2023-12-01 · +67dVerified by operator

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_46a9d4d2157948362024-02-06Verified by operator
Massachusetts State AGbd_60b382d4082914f92024-02-06Verified by operator
New Hampshire State AGbd_fd262f0a9dde34282024-02-08 · +2dVerified
Maine State AGbd_616d6833f0ce10662024-03-29 · +52dVerified

Name: Bayer Heritage Federal Credit Union
norm: bayer heritage federal credit union
Domain: bayerhfcu.com

Name: Bayer Heritage Federal Credit Union
norm: bayer heritage federal credit union
Domain: bayerhfcu.com
Industry: Financial Servicesllm

Discovered: Nov 1, 2023
Breach occurred: Oct 31, 2023 – Nov 1, 2023
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 7state-resident count only
Data types: Identity (basic)PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Promptly took steps to contain it
Engaged a leading, third-party forensic investigation firm to confirm the security of our systems and to further investigate
Offering a complimentary one-year membership of Experian IdentityWorksSM Credit 3B
Changes made: Evaluating our technical security measures for ways to prevent a similar incident in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(97 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

Maine State AGFeb 6 · first

Massachusetts State AGFeb 6 · first

Montana State AGFeb 6 · first · this page

New Hampshire State AG+2d

Maine State AG+52d

Pattern: first filing Feb 6 (ME), last Mar 29 (ME) — a 52-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1080.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 6, 2024
Raw hash: 08203bc0629b2ec4a9c80e54c8fe06918dba80322c2c39104b65f3b2c7ddee55

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityBayer Heritage Federal Credit Union

Victim entityBayer Heritage Federal Credit Union

Incidentdiscovered Nov 1, 2023

Stated responsePromptly took steps to contain it

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov