HackingFinancial ServicesFinanceCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

First Financial Credit Union

bd_aaf2a11c9e9b4c5a · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Apr 6, 2022

To disclose

—

Affected

98state residents only

Linked

6 filings

Confidence

64%

Full breach record for First Financial Credit Union →

First Financial Credit Union notified members of a data security incident where an unauthorized third party accessed files containing personal information (names, SSNs, driver's licenses, financial account info) between Jan 17 and Feb 6, 2022. No evidence of fraud or core system access. FFCU engaged forensic investigators, notified law enforcement, and offered one year of Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 17, 2022

Begins

Apr 6, 2022

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit2bd_4c739a25c8efe3702022-02-27 · +38dVerified by operator

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_1a71afc14cbd87652022-05-18 · +42dVerified
Massachusetts State AGbd_5bb942b7848d57d52022-05-18 · +42dVerified
Oregon State AGbd_d75b26bc54abcc1a2022-05-18 · +42dVerified by operator
California State AGbd_dc948e8357a879062022-05-18 · +42dVerified

Name: First Financial Credit Union
norm: first financial credit union
Domain: ffnm.org

Name: First Financial Credit Union
norm: first financial credit union
Domain: ffnm.org
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Jan 17, 2022 – Feb 6, 2022
Materiality determined: —
Notification sent: Apr 6, 2022
Affected individuals: 98state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Secured the affected servers to prevent further unauthorized access
Began an internal investigation
Hired a leading forensic security firm to further investigate the incident
Notified law enforcement and are cooperating with their investigation
Offering a complimentary one-year membership of Experian IdentityWorks Credit 3B
Changes made: Reviewing FFCU’s technical controls to improve our security posture
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGApr 6 · first · this page

Maine State AG+42d

Massachusetts State AG+42d

Oregon State AG+42d

California State AG+42d

Pattern: first filing Apr 6 (MT), last May 18 (CA) — a 42-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-60.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 6, 2022
Raw hash: 522ca1300781b83a64e86d3550b6487d9a6a0634d737b819e02f21b7985b8e02

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityFirst Financial Credit Union

Victim entityFirst Financial Credit Union

IncidentUnauthorized Access

Stated responseSecured the affected servers to prevent further unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov