Social EngineeringPhishingStolen CredentialsTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Fort McClellan Credit Union
bd_8b4c61b6e32e368b · schema v1 · pii pii-v1
Full breach record for Fort McClellan Credit Union →Camp Shelby Federal Credit Union notified consumers of a data security incident discovered on September 11, 2024, involving suspicious activity on an employee's email account. The incident may have exposed names and Social Security numbers. CSFCU engaged cybersecurity experts, reset passwords, and notified law enforcement. Complimentary identity protection services were offered.
Vermont clock✗ VT AG >45 bday13 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-12-10-camp-shelby-federal-credit-union-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 10, 2024
- Raw hash
- 6e2a2c9fb2341c00d1a6b77d56bcae2afa5908b4c6453e893e3d1722bf97af0f
Reporting entity
- Name
- Fort McClellan Credit Unionnorm: fort mcclellan credit union
Victim entity
- Name
- Fort McClellan Credit Unionnorm: fort mcclellan credit union
Incident
- Discovered
- Sep 11, 2024
- Materiality determined
- —
- Notification sent
- Nov 22, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 13 weeks(90 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.