HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICLowContained
South Bay Credit Union
bd_be8aa70e9935fd48 · schema v1 · pii pii-v1
Full breach record for South Bay Credit Union →South Bay Credit Union discovered unauthorized access to an employee's email account on November 18, 2024. The attacker accessed limited personal information, including names and other data elements. The credit union secured the account, engaged third-party investigators, and is offering credit monitoring to affected members.
California clockDiscovered Nov 18, 2024 → Notified May 13, 2025176d ✗ CA 60-day late25 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_99daa838a9f34a3dIndiana State AGfiled 2025-05-13Verified
- bd_d3138b4a5b9dfc1eMaine State AGfiled 2025-05-13Verified
- bd_08a74b1806c29f8fVermont State AGfiled 2025-05-14(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-602658
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 13, 2025
- Raw hash
- a7dfb0bab15ad52278149f7d6760f18478b10b78ed9b8b8fe8291f4e938477cb
Reporting entity
- Name
- South Bay Credit Unionnorm: south bay credit union
- Domain
- southbaycu.com
Victim entity
- Name
- South Bay Credit Unionnorm: south bay credit union
- Domain
- southbaycu.com
Incident
- Discovered
- Nov 18, 2024
- Materiality determined
- —
- Notification sent
- May 13, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 25 weeks(176 days from discovery to filing)
- Compliance flags
- CA 60-day late · 176d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 18, 2024→ Notified: May 13, 2025176d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.