HackingFinancial ServicesFinanceCustomer Data InvolvedFinancial accountIdentity (basic)Government IDMediumContained

MemberSource Credit Union

bd_9aa063fac94e3ba3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 8, 2026

To disclose

—

Affected

30state residents only

Linked

8 filings

Confidence

64%

Full breach record for MemberSource Credit Union →

MemberSource Credit Union notified Massachusetts residents of a network data event involving unauthorized access to personal information, including names, Social Security numbers, and financial account data. The credit union reset passwords, engaged specialists, and reported the incident to federal law enforcement. No fraud was reported. Affected individuals were offered 24 months of credit monitoring and fraud assistance.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

May 8, 2026

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 8 about the same incident.View merged incident

A leak claim by safepay about this victim predates this filing by 339 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitesafepaybd_b2fc6079fb9d7fa02025-06-03 · +339dVerified by operator

Regulatory filings (6) · sorted by filing gap

California State AGbd_9db84dbb566e334a2026-05-08Verified
Vermont State AGbd_c53f2485178b1a202026-05-08Verified
Nebraska State AGbd_1368db5c6ffe857e2026-05-07 · +1dVerified by operator
Indiana State AGbd_61c95d24c3f146972026-05-07 · +1dVerified

Show 2 more filings ↓up to 3d gap

Texas State AGbd_aa1e8bc975a47fba2026-05-11 · +3dVerified
Montana State AGbd_1fa68433c68e29442026-05-05 · +3dCandidate

Name: MemberSource Credit Union
norm: membersource credit union
Domain: membersourcecu.org

Name: MemberSource Credit Union
norm: membersource credit union
Domain: membersourcecu.org
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: May 7, 2026
Affected individuals: 30state-resident count only
Data types: Financial accountIdentity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: reported the incident to federal law enforcement

During the incident: Began working under the guidance of specialists to investigate the nature and scope and restore our operations safely and securely
Reset user passwords
Reported the incident to federal law enforcement
Providing you with access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing you with proactive fraud assistance
Changes made: Reviewing our existing security controls, policies, and procedures we have in place to maximize the benefits of our encryption software
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Montana State AGMay 5 · first

Nebraska State AG+2d

Indiana State AG+2d

California State AG+3d

Vermont State AG+3d

Massachusetts State AG+3d · this page

Texas State AG+6d

Pattern: first filing May 5 (MT), last May 11 (TX) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-730-membersource-credit-union/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 8, 2026
Raw hash: 4898ea771f10b8b0080e1231cee502c5ac4cb2e488f15459e66d83f77c7d38ff

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Reporting entityMemberSource Credit Union

Victim entityMemberSource Credit Union

IncidentUnauthorized Access

Stated responseBegan working under the guidance of specialists to investigate the nature and scope and restore our operations safely and securely

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov