Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedPIIIDENTITY_BASICLowContained
FLORIDACENTRAL CREDIT UNION
bd_8ef0796341986541 · schema v1 · pii pii-v1
Full breach record for FLORIDACENTRAL CREDIT UNION →FloridaCentral Credit Union reported that an unauthorized third party accessed a single employee email account between April 2 and April 4, 2024, following suspicious activity detected on April 4. The incident likely involved personal information of members, including names and addresses. The credit union secured the account, notified regulators, and offered one year of free credit monitoring to affected individuals.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_0a85cd845dfe1fa0Montana State AGfiled 2024-10-03Candidate
- bd_3a51dd5d641a645bVermont State AGfiled 2024-10-03Verified
- bd_abe83fda3e46938dMaine State AGfiled 2024-10-03Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/floridacentral-credit-union-20241003.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 3, 2024
- Raw hash
- 24a33dcb5b2a546e9cfebefb4eae4714d8a29c3fe46a6b55637d3289d192dba2
Reporting entity
- Name
- FLORIDACENTRAL CREDIT UNIONnorm: floridacentral credit union
Victim entity
- Name
- FLORIDACENTRAL CREDIT UNIONnorm: floridacentral credit union
Incident
- Discovered
- Apr 4, 2024
- Materiality determined
- Jul 31, 2024
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- notified its state and federal regulators
- Initial access
- phishing_link
Compliance
- Time to disclose
- 26 weeks(182 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.