PhysicalFinancial ServicesFinanceSkimmerCustomer Data InvolvedFinancial accountFinancial credentialsIdentity (basic)LowResolved

PATELCO CREDIT UNION

bd_6a5b75f8f3462c01 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Apr 12, 2023

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for PATELCO CREDIT UNION →4 incidents on file

Patelco Credit Union notified members that a skimming device was installed on an ATM in Dublin, CA, capturing card data between February 8 and March 14, 2023. The device captured names, card numbers, expiration dates, and verification codes. Patelco replaced affected cards, enhanced fraud monitoring, and added security hardware to the ATM. The investigation is complete.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 8, 2023

Begins

Apr 12, 2023

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: PATELCO CREDIT UNION
norm: patelco credit union
Domain: patelco.org

Name: PATELCO CREDIT UNION
norm: patelco credit union
Domain: patelco.org
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Feb 8, 2023 – Mar 14, 2023
Materiality determined: —
Notification sent: Apr 11, 2023
Affected individuals: Not disclosed
Data types: Financial accountFinancial credentialsIdentity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1539 Steal Web Session CookieT1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Contacted relevant law enforcement

During the incident: Launched an investigation
Contacted relevant law enforcement
Replacing your affected card(s) with new card(s)
Enhanced fraud monitoring to your card account(s)
Adding extra security hardware to the ATM
Enhancing branch procedures to help safeguard the ATM against tampering
Changes made: Adding extra security hardware to the ATM
Enhancing branch procedures to help safeguard the ATM against tampering
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-565471
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 12, 2023
Raw hash: e453c3773fda7dbae8561f260d19cf4ff1fea21fa6c00bcdb5f3eae76f6d1530

Reporting entityPATELCO CREDIT UNION

Victim entityPATELCO CREDIT UNION

IncidentUnknown

Stated responseLaunched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov