DisclosureLens
HackingFinancial ServicesFinanceCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumContained

Fairmont Federal Credit Union

bd_a6c06c435aa4a961 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 23, 2024

Filed

Sep 11, 2025

To disclose

20 months

Affected

Not disclosed

Linked

8 filings

Confidence

65%
Full breach record for Fairmont Federal Credit Union

Fairmont Federal Credit Union experienced a data security incident where an unauthorized party accessed files containing full names and Social Security numbers between September 30, 2023, and October 18, 2023. The credit union became aware of the incident on January 23, 2024. A forensic investigation was conducted with external cybersecurity professionals. Affected individuals are offered complimentary Experian IdentityWorks services.

Leak gap clock Leak >180d20 months discovery → filing

Incident timeline

undetected · 115 days
discovery → filing · 20 months / 597 days

Sep 30, 2023

Begins

Jan 23, 2024

Discovered

Sep 11, 2025

Filed

vs. sector median

+77 wks slower

This filing is one of 8 about the same incident.View merged incident
A leak claim by black_basta about this victim predates this filing by 694 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Show 2 more filingsup to 7d gap

Filing propagation · 7 filings · 7 states

View merged incident ↗
Maine State AGSep 11 · first
Montana State AGSep 11 · first
Nebraska State AGSep 11 · first
Massachusetts State AGSep 11 · first
California State AGSep 11 · first · this page

Pattern: first filing Sep 11 (ME), last Sep 18 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.