HackingStolen CredentialsCustomer Data InvolvedPIIIDENTITY_BASICLowContained
EDUCATIONAL EMPLOYEES CREDIT UNION
bd_6b3e06557a4d06e6 · schema v1 · pii pii-v1
Full breach record for EDUCATIONAL EMPLOYEES CREDIT UNION →Educational Employees Credit Union reported that on December 15, 2025, an unauthorized individual gained access to one employee email account for a limited period. The organization immediately secured the email environment and engaged cybersecurity professionals. A review determined that certain emails containing personal information may have been accessed or removed. The organization is offering two years of complimentary identity monitoring services through Kroll to affected individuals.
California clockDiscovered Dec 15, 2025 → Notified May 29, 2026165d ✗ CA 60-day late24 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_d4e3d38742b461e1Texas State AGfiled 2026-06-01(3d gap)Verified by operator
- bd_15b461a85b8b7df7Massachusetts State AGfiled 2026-05-01(28d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-624147
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 29, 2026
- Raw hash
- 0f3ac79516ea8b5c843209717590d7e5ebb1070e80e5ee1b887d59ead394859d
Reporting entity
- Name
- EDUCATIONAL EMPLOYEES CREDIT UNIONnorm: educational employees credit union
Victim entity
- Name
- EDUCATIONAL EMPLOYEES CREDIT UNIONnorm: educational employees credit union
Incident
- Discovered
- Dec 15, 2025
- Materiality determined
- —
- Notification sent
- May 29, 2026
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 24 weeks(165 days from discovery to filing)
- Compliance flags
- CA 60-day late · 165dCA AG copy ≤15d · 0d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 15, 2025→ Notified: May 29, 2026165d 60 days (analyst band, pre-2026 discoveries) CA 60-day late California Consumers notified: May 29, 2026→ AG copy submitted: May 29, 20260d 15 calendar days CA AG copy ≤15d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.