MalwareRansomwareData ExfiltratedData EncryptedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Appalachian Community Federal Credit Union
bd_87f56850debb236e · schema v1 · pii pii-v1
Full breach record for Appalachian Community Federal Credit Union →Appalachian Community Federal Credit Union notified consumers of a data event discovered on October 7, 2025. The incident involved unauthorized access to its network, resulting in the exfiltration of files containing names, Social Security numbers, and financial account information. The Credit Union took its network offline, engaged forensic specialists, reset passwords, and reported the incident to federal law enforcement. Affected individuals are offered credit monitoring services.
Vermont clock✗ VT AG >45 bday12 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_5c231de9fb96a040Indiana State AGfiled 2025-12-30Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-12-30-appalachian-community-federal-credit-union-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 30, 2025
- Raw hash
- 38bddcc3d18a690381a5510566e65ac2cc9880c18b99fb570ff6cfbd6d7a6bb7
Reporting entity
- Name
- Appalachian Community Federal Credit Unionnorm: appalachian community federal credit union
Victim entity
- Name
- Appalachian Community Federal Credit Unionnorm: appalachian community federal credit union
Incident
- Discovered
- Oct 7, 2025
- Materiality determined
- —
- Notification sent
- Dec 30, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- reported the incident to federal law enforcement
Compliance
- Time to disclose
- 12 weeks(84 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.