HackingFinancial ServicesFinanceCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALSMediumContained
CONNEX CREDIT UNION
bd_975123fa51efd59c · schema v1 · pii pii-v1
Full breach record for CONNEX CREDIT UNION →Connex Credit Union experienced unauthorized access to files in its cyber environment between June 2-3, 2025. The breach was discovered on July 27, 2025. Potentially exposed data includes names, account numbers, debit card information, Social Security numbers, and/or other government IDs. 467 Maine residents were affected out of approximately 172,000 total. Connex notified the NCUA and federal law enforcement and offered 12 months of Cyberscout credit monitoring.
Maine clockDiscovered Jul 27, 2025 → Filed with AG Aug 8, 202512d ✓ ME AG ≤30d12 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_11cb4d7ecd0a90f9South Carolina State AGfiled 2025-08-08Verified
- bd_383732811c88e6d5Texas State AGfiled 2025-08-08Verified
- bd_14a6428040752acaIndiana State AGfiled 2025-08-07(1d gap)Verified
- bd_2d7ba7fcb1ed3162California State AGfiled 2025-08-07(1d gap)Verified
Show 2 more filings ↓Show fewer ↑up to 1d gap
- bd_b671a1b2a1a142f4Vermont State AGfiled 2025-08-07(1d gap)Verified
- bd_beda1a58d91c700cMontana State AGfiled 2025-08-07(1d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ba496af0-2688-4929-ad01-f07a4d8972cf.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 8, 2025
- Raw hash
- 4e2f92ac2cac38dfa97b7c0a9cdc2930bb53831c1dc63bba46419550afc38b92
Reporting entity
- Name
- CONNEX CREDIT UNIONnorm: connex credit union
- Domain
- connexcu.org
- Industry
- Financial Services
Victim entity
- Name
- CONNEX CREDIT UNIONnorm: connex credit union
- Domain
- connexcu.org
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Jul 27, 2025
- Materiality determined
- —
- Notification sent
- Aug 7, 2025
- Affected individuals
- 467
- Data types
- PIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1530 Data from Cloud StorageT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney General pursuant to Me. Rev. Stat. tit. 10 § 1348Notified the National Credit Union AdministrationNotified federal law enforcement
Compliance
- Time to disclose
- 12 days(12 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 12d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 27, 2025→ Filed with AG: Aug 8, 202512d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.