HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICLowContained
LA Financial Federal Credit Union
bd_b1e21f93fe7616c9 · schema v1 · pii pii-v1
Full breach record for LA Financial Federal Credit Union →LA Financial Federal Credit Union reported that on July 18, 2024, it discovered suspicious activity related to an employee email account. Investigation determined the account was subject to unauthorized access. Affected individuals' first and last names, potentially combined with other variable data, were at risk. The credit union secured its systems, engaged forensic specialists, and offered up to 24 months of complimentary credit monitoring via IDX. The incident is contained.
California clockDiscovered Jul 18, 2024 → Notified Dec 26, 2024161d ✗ CA 60-day late24 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_c88f7e837333a2fdMontana State AGfiled 2024-12-30Verified
- bd_ce1399a5f6a7b566California State AGfiled 2024-12-30Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-596766
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 30, 2024
- Raw hash
- dfe2e312575446b894b74d59bacb3596503f0ddbad099727ed67e49bea34f0c5
Reporting entity
- Name
- LA Financial Federal Credit Unionnorm: la financial federal credit union
Victim entity
- Name
- LA Financial Federal Credit Unionnorm: la financial federal credit union
Incident
- Discovered
- Jul 18, 2024
- Materiality determined
- —
- Notification sent
- Dec 26, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
Compliance
- Time to disclose
- 24 weeks(165 days from discovery to filing)
- Compliance flags
- CA 60-day late · 161d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 18, 2024→ Notified: Dec 26, 2024161d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.