HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Grow Financial Federal Credit Union
bd_9c1ecc65aab61b78 · schema v1 · pii pii-v1
Full breach record for Grow Financial Federal Credit Union →Grow Financial Federal Credit Union experienced an external system breach (hacking) on November 17, 2023, discovered on January 22, 2024. The incident affected 1,635 individuals, including 1 Maine resident. Acquired data included names and Social Security Numbers. The credit union provided written notification and offered one year of Experian IdentityWorks credit monitoring.
Maine clockDiscovered Jan 22, 2024 → Filed with AG Mar 11, 202449d ⏱ ME AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_311fd3c0e09f8903Montana State AGfiled 2024-03-11Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1bf34dc8-8017-476e-bf6e-7cf44b8c0bb7.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 11, 2024
- Raw hash
- 69cefbd06048c1fc394696ad5e1eb6c5be5d09831042dbf70c6a58ce3721809b
Reporting entity
- Name
- Grow Financial Federal Credit Unionnorm: grow financial federal credit union
Victim entity
- Name
- Grow Financial Federal Credit Unionnorm: grow financial federal credit union
Incident
- Discovered
- Jan 22, 2024
- Materiality determined
- —
- Notification sent
- Mar 11, 2024
- Affected individuals
- 1,635
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(49 days from discovery to filing)
- Compliance flags
- ME AG >30d · 49d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 22, 2024→ Filed with AG: Mar 11, 202449d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.