HackingFinancial ServicesFinanceData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

CARTER FEDERAL CREDIT UNION

bd_9d317855067d3fbc · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jul 2, 2025

Filed

Aug 29, 2025

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

66%

Full breach record for CARTER FEDERAL CREDIT UNION →2 incidents on file

Carter Federal Credit Union notified Nebraska residents of a data breach where an unauthorized third party accessed network files between June 25 and July 2, 2025. The incident involved personal information, potentially including government IDs. Carter engaged forensic investigators and law enforcement, offering one year of Experian IdentityWorks credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

Jun 25, 2025

Begins

Jul 2, 2025

Discovered

Aug 29, 2025

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

New Hampshire State AGbd_2424670b314bd8552025-08-29Verified
Massachusetts State AGbd_3270f13559d982952025-08-29Verified
California State AGbd_45d1b98cee446fb72025-08-29Candidate
Maine State AGbd_cce49a2b0ac7837b2025-08-29Verified

Name: CARTER FEDERAL CREDIT UNION
norm: carter federal credit union

Name: CARTER FEDERAL CREDIT UNION
norm: carter federal credit union
Industry: Financial Servicesllm

Discovered: Jul 2, 2025
Breach occurred: Jun 25, 2025 – Jul 2, 2025
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Took steps to contain and remediate the incident
Launched an internal investigation
Reported the incident to law enforcement
Engaged a leading forensic security firm to assist in our investigation and confirm the security of our computer systems and network
Changes made: Enhancing our technical security measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

New Hampshire State AGAug 29 · first

Massachusetts State AGAug 29 · first

California State AGAug 29 · first

Maine State AGAug 29 · first

Nebraska State AGAug 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/8af5788b-c72d-4b24-8602-2f5be1173547.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 29, 2025
Raw hash: c504458b646589c872cfc67f2477387bf1969659178c6fff76284d11811b6827

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityCARTER FEDERAL CREDIT UNION

Victim entityCARTER FEDERAL CREDIT UNION

Incidentdiscovered Jul 2, 2025

Stated responseTook steps to contain and remediate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov