HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedDelayed DiscoveryPIILowContained
Abbott Laboratories Employees Credit Union ("ALEC")
bd_bbc00141d67e28fa · schema v1 · pii pii-v1
Full breach record for Abbott Laboratories Employees Credit Union ("ALEC") →Abbott Laboratories Employees Credit Union (ALEC) notified 61 Maine residents (36,044 total) of a data breach in which an unknown unauthorized third party accessed one employee email account on August 2, 2024. The incident was discovered on September 23, 2024, following an internal review and forensic investigation. Affected individuals were notified on October 18, 2024, and offered 12-month Experian IdentityWorks Credit 3B identity protection services.
Maine clockDiscovered Sep 23, 2024 → Filed with AG Oct 18, 202425d ✓ ME AG ≤30d25 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed61 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/97df69a6-a63c-4640-8c0d-b480bc3807a0.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 18, 2024
- Raw hash
- 9040d1aa288bd94fcad913eb61d7fe9fb62332963c8db60bc6a3a02d4ec7d077
Reporting entity
- Name
- Abbott Laboratories Employees Credit Union ("ALEC")norm: abbott laboratories employees credit union alec
- Industry
- Financial Services
Victim entity
- Name
- Abbott Laboratories Employees Credit Union ("ALEC")norm: abbott laboratories employees credit union alec
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Sep 23, 2024
- Materiality determined
- —
- Notification sent
- Oct 18, 2024
- Affected individuals
- 61
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 25 days(25 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 25d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 23, 2024→ Filed with AG: Oct 18, 202425d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.