HackingFinancial ServicesFinanceSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDMediumContained

TEXAS DOW EMPLOYEES CREDIT UNION

bd_88e3b57d2d281e64 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Aug 23, 2024

To disclose

—

Affected

Not disclosed

Linked

7 filings

Confidence

68%

Full breach record for TEXAS DOW EMPLOYEES CREDIT UNION →

Texas Dow Employees Credit Union (TDECU) notified consumers of a data breach involving a third-party vendor (MOVEit). The incident exposed personal information including names, addresses, dates of birth, Social Security numbers, and potentially financial account numbers. TDECU offered 12 months of Experian IdentityWorks. 20 Rhode Island residents were explicitly identified as impacted.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Aug 23, 2024

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

California State AGbd_1caca9cfdc469dff2024-08-23Verified
Massachusetts State AGbd_275ff264b853e3ce2024-08-23Verified
Maine State AGbd_435c6c0784b230ee2024-08-23Verified by operator
Indiana State AGbd_634c94500f5b12582024-08-23Verified

Show 2 more filings ↓

New Hampshire State AGbd_b2e7dac90834b1132024-08-23Verified
Montana State AGbd_e658683972919e3c2024-08-23Candidate

Name: TEXAS DOW EMPLOYEES CREDIT UNION
norm: texas dow employees credit union

Name: TEXAS DOW EMPLOYEES CREDIT UNION
norm: texas dow employees credit union
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: Partner
Initial access: supply_chain

During the incident: Providing complimentary access to Experian IdentityWorks for 12 months
Established a dedicated and confidential toll-free response line
Changes made: Continually evaluate and modify practices and controls to enhance security and privacy
MOVEit has represented that the vulnerability exploited in this attack has been fixed
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

California State AGAug 23 · first

Massachusetts State AGAug 23 · first

Maine State AGAug 23 · first

Indiana State AGAug 23 · first

New Hampshire State AGAug 23 · first

Montana State AGAug 23 · first

Vermont State AGAug 23 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-08-23-texas-dow-employees-credit-union-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 23, 2024
Raw hash: 21659f3d40abd856ae99fc49fccbd1e32efe4892da2cba268a37648edb43eef0

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityTEXAS DOW EMPLOYEES CREDIT UNION

Victim entityTEXAS DOW EMPLOYEES CREDIT UNION

IncidentThird-Party / Supply Chain

Stated responseProviding complimentary access to Experian IdentityWorks for 12 months

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov