DisclosureLens
HackingFinancial ServicesFinanceCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsMediumContained

NuVista Federal Credit Union

bd_ac3ecbadaba74c3c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 3, 2020

Filed

Dec 5, 2020

To disclose

5 weeks

Affected · nationwide

12,06110 in this filing

Linked

2 filings

Confidence

75%
Full breach record for NuVista Federal Credit Union →

Nuvista Federal Credit Union reported a data breach to the Maine Attorney General, stating that an external system breach (hacking) occurred on March 9, 2020. The breach was discovered on November 3, 2020. The breach affected 10 Maine residents, and the compromised information included names in combination with financial account numbers or credit/debit card numbers. Nuvista began notifying affected consumers in writing on December 3, 2020, and offered 12 months of complimentary credit monitoring through Experian.

Maine clockDiscovered Nov 3, 2020 → Filed with AG Dec 5, 202032d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 239 days
discovery → filing · 5 weeks / 32 days

Mar 9, 2020

Begins

Nov 3, 2020

Discovered

Dec 5, 2020

Filed

vs. sector median

5 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
Montana State AGDec 3 · first
Maine State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.