PhysicalFinancial ServicesFinanceSkimmerTargetedFinancial accountFinancial credentialsPIILowContained

Boeing Employees Credit Union

bd_a83fa2a3f2aa8f93 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jul 9, 2020

To disclose

—

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for Boeing Employees Credit Union →7 incidents on file

Boeing Employees' Credit Union (BECU) notified members of a data security incident involving deep insert skimmers installed at six ATMs in Washington state during April-June 2020. Compromised data included names, card numbers, CVVs, PINs, and expiration dates. BECU reversed fraudulent transactions, issued new cards/PINs, and deployed fraud detection technology. No SSN or government ID data was compromised.

J jump to incidentP pin to compareR raw source

Incident timeline

Apr 1, 2020

Begins

Jul 9, 2020

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Washington State AGbd_38bca1f6cd37e2822020-07-09Candidate
Massachusetts State AGbd_69e83d0a41cb36852020-07-09Verified

Name: Boeing Employees Credit Union
norm: boeing employees credit union
Domain: becu.org

Name: Boeing Employees Credit Union
norm: boeing employees credit union
Domain: becu.org
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Apr 1, 2020 – Jun 30, 2020
Materiality determined: —
Notification sent: Jul 9, 2020
Affected individuals: 1state-resident count only
Data types: Financial accountFinancial credentialsPII
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial

During the incident: Deployed technology to help identify and decline potentially fraudulent transactions
Reversed unauthorized transactions and credited affected accounts
Issued new cards to affected members
In process of issuing new cards and PINs to all affected members
Changes made: Bolstering ATM security using information uncovered during investigation
Routinely taking steps to increase security of ATMs to keep up with industry standards
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Washington State AGJul 9 · first

Massachusetts State AGJul 9 · first

Montana State AGJul 9 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Boeing-Employees-Credit-Union-Consumer-ltr.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 9, 2020
Raw hash: 4a4b18b418d9f2895b265bda3d212bc53799a0264bea6b106d1ca5377a09488d

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityBoeing Employees Credit Union

Victim entityBoeing Employees Credit Union

IncidentUnknown

Stated responseDeployed technology to help identify and decline potentially fraudulent transactions

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov