AccidentalMisdeliverySupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
LOS ANGELES POLICE Federal Credit Union
bd_b475b26ab2adc9dc · schema v1 · pii pii-v1
Full breach record for LOS ANGELES POLICE Federal Credit Union →Los Angeles Police Federal Credit Union (LAPFCU) reported a data breach to the California Attorney General on July 17, 2019. A third-party credit card systems vendor mistakenly sent an encrypted file containing members' personal information (name, address, SSN, credit card number, loan balance) to another federally insured credit union on July 17, 2019. LAPFCU discovered the error on July 24, 2019. The receiving credit union destroyed the file. LAPFCU offered one year of complimentary credit monitoring via CyberScout. No unauthorized access to LAPFCU systems occurred.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-149865
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 19, 2019
- Raw hash
- cf8b6c347e86d8c31834f4eb5928d83176ebe39ef909902814d23b69cffc026b
Reporting entity
- Name
- LOS ANGELES POLICE Federal Credit Unionnorm: los angeles police federal credit union
- Domain
- lapfcu.org
Victim entity
- Name
- LOS ANGELES POLICE Federal Credit Unionnorm: los angeles police federal credit union
- Domain
- lapfcu.org
Incident
- Discovered
- Jul 24, 2019
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- Partner
- Regulator citations
- Submitted Breach Notification to California Office of the Attorney General (SB24)
- Initial access
- supply_chain
Compliance
- Time to disclose
- 26 days(26 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.