MalwareRansomwareRansom DemandedData EncryptedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Georgia Heritage Federal Credit Union
bd_9b6f3394bb016a57 · schema v1 · pii pii-v1
Full breach record for Georgia Heritage Federal Credit Union →Georgia Heritage Federal Credit Union notified the NH Attorney General of a ransomware incident occurring on Jan 25, 2025, discovered Feb 10, 2025. 12 NH residents affected; data included names, SSNs, DOBs, and financial account numbers. Notifications mailed Jan 15, 2026, offering credit monitoring.
Leak gap clock✗ Leak >180d14 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by ransomhub about this victim predates this filing by 447 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_e8c28663727256b3Vermont State AGfiled 2026-04-17Verified
- bd_1539035136c4ef1cTexas State AGfiled 2026-04-22(5d gap)Candidate
- bd_5b72bcb385064262New Hampshire State AGfiled 2026-04-27(10d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/georgia-heritage-federal-credit-union-20260417.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 17, 2026
- Raw hash
- ecfb8fc743707186bc9e6cd366fc006e326d6630a953328eb06c100367b0accc
Reporting entity
- Name
- Pierson Ferdinand LLPnorm: pierson ferdinand
- Domain
- pierferd.com
Victim entity
- Name
- Georgia Heritage Federal Credit Unionnorm: georgia heritage federal credit union
- Domain
- gaheritagefcu.org
Incident
- Discovered
- Feb 10, 2025
- Materiality determined
- —
- Notification sent
- Jan 15, 2026
- Affected individuals
- 12
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
Compliance
- Time to disclose
- 14 months(431 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.