AccidentalData MishandlingSupply Chain (3P Vendor)Employee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMedium
Workers Federal Credit Union
bd_6b8ffdabc8243576 · schema v1 · pii pii-v1
Full breach record for Workers Federal Credit Union →Workers Federal Credit Union reported a data breach affecting 659 individuals, resulting from a security incident at a third-party vendor that provides insurance services to its employees and their dependents. The incident, which occurred between March 28 and April 17, 2023, exposed names and Social Security numbers. Affected individuals were notified on June 15, 2023, and offered two years of complimentary credit monitoring and identity protection services.
Maine clockDiscovered Apr 17, 2023 → Filed with AG Jun 23, 202367d ⏱ ME AG >30d10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed659 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e1046c2b-3e34-46e2-9694-7a1adceeb131.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 23, 2023
- Raw hash
- 9096ff0e6c32c25d97bc690497f9b415a63fc78fb325f89d8f26cc2c76d063a1
Reporting entity
- Name
- Workers Federal Credit Unionnorm: workers federal credit union
Victim entity
- Name
- Workers Federal Credit Unionnorm: workers federal credit union
Incident
- Discovered
- Apr 17, 2023
- Materiality determined
- —
- Notification sent
- Jun 15, 2023
- Affected individuals
- 659
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- Partner
Compliance
- Time to disclose
- 10 weeks(67 days from discovery to filing)
- Compliance flags
- ME AG >30d · 67d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 17, 2023→ Filed with AG: Jun 23, 202367d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.