MalwareIdentity (basic)Government IDFinancial accountHealth (basic)EmploymentMediumContained

Georgia Heritage Federal Credit Union

bd_a9f560c529b27a0b · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jan 25, 2025

Filed

Jan 15, 2026

To disclose

—

Affected

Not disclosed

Linked

10 filings

Confidence

69%

Full breach record for Georgia Heritage Federal Credit Union →3 incidents on file

Georgia Heritage Federal Credit Union notified Nebraska AG on January 15, 2026, of a ransomware incident occurring on or about January 25, 2025. The breach potentially exposed personal information including names, SSNs, DOB, driver's license info, financial account numbers, and health data. GA Heritage secured its network, engaged third-party forensic and data mining vendors, reset credentials, and enhanced security. Affected individuals were offered 12 months of credit monitoring via Experian and fraud assistance via HaystackID. No fraudulent misuse has been confirmed.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

Jan 25, 2025

Begins

Jan 25, 2025

Discovered

Jan 15, 2026

Filed

This filing is one of 10 about the same incident.View merged incident

A leak claim by ransomhub about this victim predates this filing by 355 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Indiana State AGbd_fd6f4db540c1cc012026-01-15Verified
New Hampshire State AGbd_9b6f3394bb016a572026-04-17 · +92dVerified
Vermont State AGbd_e8c28663727256b32026-04-17 · +92dVerified
Maine State AGbd_e8d6d8ccf46873e62026-04-17 · +92dVerified

Show 5 more filings ↓up to 131d gap

South Carolina State AGbd_2783e266a5f1508e2026-04-20 · +95dVerified
Texas State AGbd_1539035136c4ef1c2026-04-22 · +97dVerified
New Hampshire State AGbd_5b72bcb3850642622026-04-27 · +102dVerified
Massachusetts State AGbd_cb156bc6b63d12592026-04-28 · +103dVerified
New Hampshire State AGbd_21ac0ea0be3559bf2026-05-26 · +131dVerified

Name: Georgia Heritage Federal Credit Union
norm: georgia heritage federal credit union
Domain: gaheritagefcu.org

Name: Georgia Heritage Federal Credit Union
norm: georgia heritage federal credit union
Domain: gaheritagefcu.org

Discovered: Jan 25, 2025
Breach occurred: Jan 25, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 15, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)Employment
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Secured its network
Engaged a specialized third-party cybersecurity firm to conduct a comprehensive investigation
Engaged a data mining vendor to review the accessed files
Changed all user credentials
Enhanced the security measures
Providing you with access to CyEx Financial Shield Complete with Experian Single Bureau Credit Monitoring services at no charge
Providing you with proactive fraud assistance... by HaystackID
Changes made: Changed all user credentials
Enhanced the security measures
Steps and will continue to take steps to mitigate the risk of a similar event occurring in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 8 states

View merged incident ↗

Indiana State AGJan 15 · first

Nebraska State AGJan 15 · first · this page

New Hampshire State AG+92d

Vermont State AG+92d

Maine State AG+92d

South Carolina State AG+95d

Texas State AG+97d

New Hampshire State AG+102d

Massachusetts State AG+103d

New Hampshire State AG+131d

Pattern: first filing Jan 15 (IN), last May 26 (NH) — a 131-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/5e99e547-ce03-4726-b491-7b4ed4e82b25.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 15, 2026
Raw hash: 358809c690f69278f8618476bc8816e99ef44f556ac2f1540ab5d5f0c5ec3fc7

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityGeorgia Heritage Federal Credit Union

Victim entityGeorgia Heritage Federal Credit Union

Incidentdiscovered Jan 25, 2025

Stated responseSecured its network

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov