PhysicalFinancial ServicesFinanceSkimmerCustomer Data InvolvedFinancial accountFinancial credentialsIdentity (basic)MediumContained

WASHINGTON STATE EMPLOYEES CREDIT UNION

bd_9731abc0354b0264 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 5, 2018

Filed

Nov 16, 2018

To disclose

11 days

Affected

2,560state residents only

Confidence

71%

Full breach record for WASHINGTON STATE EMPLOYEES CREDIT UNION →2 incidents on file

Washington State Employees Credit Union (WSECU) disclosed that criminals installed card skimmers in drive-thru ATMs at four branches in October 2018. The skimmers captured cardholder names, account numbers, CVVs, and PINs. Approximately 2,560 members were affected. WSECU notified affected members, removed the devices, and reported the incident to law enforcement.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 35 days

discovery → filing · 11 days

Oct 1, 2018

Begins

Nov 5, 2018

Discovered

Nov 16, 2018

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2,560 affectedView incident

Name: WASHINGTON STATE EMPLOYEES CREDIT UNION
norm: washington state employees credit union

Name: WASHINGTON STATE EMPLOYEES CREDIT UNION
norm: washington state employees credit union
Industry: Financial Servicesllm

Discovered: Nov 5, 2018
Breach occurred: Oct 1, 2018 – Oct 31, 2018
Undetected for: 35 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 16, 2018
Affected individuals: 2,560state-resident count only
Data types: Financial accountFinancial credentials
Data elements: NameFinancial account number
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found after the fact
Attack vector: Unknown
MITRE ATT&CK: T1530 Data from Cloud Storage Object
Threat actor: ExternalFinancial
Regulator citations: Reported the crimes to law enforcement

During the incident: Contacted impacted members
Reported the crimes to law enforcement
Removed the skimmers
Increased the security of their ATMs
Changes made: Increased the security of their ATMs
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 days(11 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10597.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 16, 2018
Raw hash: dd8bd86164102754c7023f2346e14e2798464f6496a8a9cacc75ecfb039a300f

Reporting entityWASHINGTON STATE EMPLOYEES CREDIT UNION

Victim entityWASHINGTON STATE EMPLOYEES CREDIT UNION

Incidentdiscovered Nov 5, 2018

Stated responseContacted impacted members

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com