HackingData MishandlingData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)IDENTITY_BASICFINANCIAL_ACCOUNTLowContained
WESCOM CENTRAL CREDIT UNION
bd_adb702a5c46747b1 · schema v1 · pii pii-v1
Full breach record for WESCOM CENTRAL CREDIT UNION →Wescom Central Credit Union notified California regulators of a data breach involving third-party provider Geezeo. On May 14, 2019, an unauthorized party downloaded database backups containing member names, addresses, account numbers, balances, and emails. Wescom was notified by Geezeo on September 24, 2019. No SSNs or passwords were exposed. Wescom offered 12 months of credit monitoring to affected members.
California clockDiscovered Sep 24, 2019 → Notified Nov 19, 201956d ✓ CA 60-day OK8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_3cb46747b9fecc7eMontana State AGfiled 2019-11-19Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-184514
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 19, 2019
- Raw hash
- ab044fcd540bf9358ba3eeab3e9b269b717adde705e0005772cc06709816cbe9
Reporting entity
- Name
- WESCOM CENTRAL CREDIT UNIONnorm: wescom central credit union
- Domain
- wescom.org
Victim entity
- Name
- WESCOM CENTRAL CREDIT UNIONnorm: wescom central credit union
- Domain
- wescom.org
Incident
- Discovered
- Sep 24, 2019
- Materiality determined
- —
- Notification sent
- Nov 19, 2019
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified the appropriate authorities and regulators
- Third party
- via Geezeo
- Initial access
- supply_chain
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 56d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 24, 2019→ Notified: Nov 19, 201956d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.