HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Neighbors Federal Credit Union
bd_be3a69971f3eabd6 · schema v1 · pii pii-v1
Full breach record for Neighbors Federal Credit Union →Good Neighbors Federal Credit Union experienced unauthorized network access on or about December 10, 2024. The incident potentially exposed personal information including names and government IDs. The credit union engaged external forensic investigators and is offering complimentary credit monitoring services to affected individuals.
Vermont clock✗ VT AG >45 bday20 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
A leak claim by blacksuit about this victim predates this filing by 223 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_472234fb947b259fMaine State AGfiled 2025-05-01Candidate
- bd_1a8651d2ea2af669Montana State AGfiled 2025-05-07(6d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-05-01-good-neighbor-federal-credit-union-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 1, 2025
- Raw hash
- 6952e3ab7abbe81087f6a545a7b5e7ad9eae97fea8f86746ea85fbf066c9b407
Reporting entity
- Name
- Neighbors Federal Credit Unionnorm: neighbors federal credit union
- Domain
- neighborscu.org
Victim entity
- Name
- Neighbors Federal Credit Unionnorm: neighbors federal credit union
- Domain
- neighborscu.org
Incident
- Discovered
- Dec 10, 2024
- Materiality determined
- May 1, 2025
- Notification sent
- May 1, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed notice with Vermont Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 20 weeks(142 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.