DisclosureLens
HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)CredentialsMediumContained

LAFAYETTE FEDERAL CREDIT UNION

bd_b692cb281903e8c5 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 5, 2025

Filed

Jul 30, 2025

To disclose

25 weeks

Affected · nationwide

77,337124 in this filing

Confidence

66%
Full breach record for LAFAYETTE FEDERAL CREDIT UNION →4 incidents on file

Lafayette Federal Credit Union (LFCU) issued a supplemental notice regarding an external system breach (hacking) on September 16, 2024. An unauthorized third party accessed one employee email account. LFCU discovered the incident on February 5, 2025, after a forensic review. The breach affected 77,337 individuals nationwide, including 124 Maine residents. Personal information, including names and other identifiers, was potentially acquired. LFCU secured the account, engaged forensic investigators, and offered 12 months of Experian credit monitoring.

Maine clockDiscovered Feb 5, 2025 → Filed with AG Jul 30, 2025175d ✗ ME AG >90d25 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 142 days
discovery → filing · 25 weeks / 175 days

Sep 16, 2024

Begins

Feb 5, 2025

Discovered

Jul 30, 2025

Filed

vs. sector median

+17 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed77,337 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.