HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
MemberSource Credit Union
bd_9aa063fac94e3ba3 · schema v1 · pii pii-v1
Full breach record for MemberSource Credit Union →MemberSource Credit Union notified Massachusetts residents of a network data event involving unauthorized access to personal information, including names, Social Security numbers, and financial account data. The credit union reset passwords, engaged specialists, and reported the incident to federal law enforcement. No fraud was reported. Affected individuals were offered 24 months of credit monitoring and fraud assistance.
Leak gap clock✗ Leak >180d
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
This filing is one of 2 about the same incident.View merged incident
A leak claim by safepay about this victim predates this filing by 332 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_b2fc6079fb9d7fa0Leak Sitesafepayfiled 2025-06-03(332d gap)Candidate
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-730-membersource-credit-union/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 1, 2026
- Raw hash
- 4898ea771f10b8b0080e1231cee502c5ac4cb2e488f15459e66d83f77c7d38ff
Reporting entity
- Name
- MemberSource Credit Unionnorm: membersource credit union
- Domain
- membersourcecu.org
Victim entity
- Name
- MemberSource Credit Unionnorm: membersource credit union
- Domain
- membersourcecu.org
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- May 7, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- reported the incident to federal law enforcement
Compliance
- Compliance flags
- Leak >180d
- Discovery-date grounding
- no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.