AccidentalFinancial ServicesFinanceMisdeliveryEmployee Data InvolvedGovernment IDIdentity (basic)Financial accountEmploymentMediumResolved

SCIENT Federal Credit Union

bd_b90633780c31cdef · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 14, 2015

Filed

Jul 21, 2015

To disclose

7 days

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for SCIENT Federal Credit Union →

Scient Federal Credit Union disclosed an incident of unauthorized access resulting from human error on July 14, 2015. An employee erroneously transmitted personal information of one New Hampshire resident (an employee) via secure email to a prospective employee. The data included name, SSN, home address, 401K contribution details, and year-to-date hours and pay. The recipient deleted the information and signed a notarized affidavit. The Credit Union notified the affected employee and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 days

Jul 14, 2015

Begins

Jul 14, 2015

Discovered

Jul 21, 2015

Filed

vs. sector median

7 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_55a09e7546a271742015-07-22 · +1dVerified

Name: Scient Federal Credit Union
norm: scient federal credit union

Name: SCIENT Federal Credit Union
norm: scient federal credit union
Industry: Financial Servicesllm

Discovered: Jul 14, 2015
Breach occurred: Jul 14, 2015
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 21, 2015
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)Financial accountEmployment
Attack vector: Unknown
Threat actor: Internal
Regulator citations: Notified the New Hampshire Attorney General

During the incident: Immediately contacted the individual to whom the information was sent and requested that she delete the email and the information provided with it
Obtained a notarized affidavit from the recipient confirming deletion of the information
Mailed notice of this incident to the affected employee
Offering 12 months of credit monitoring to the affected employee
Changes made: Review its policies, procedures and controls (particularly regarding electronic correspondence involving personal information)
Train staff, as appropriate, on compliance with such policies, procedures and controls
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 days(7 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGJul 21 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/scient-credit-union-20150721.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 21, 2015
Raw hash: ee071bfdfe0300cfc9183928728facfb4887ba88826fe06dada12331f6145fc6

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityScient Federal Credit Union

Victim entitySCIENT Federal Credit Union

Incidentdiscovered Jul 14, 2015

Stated responseImmediately contacted the individual to whom the information was sent and requested that she delete the email and the information provided with it

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov