DisclosureLens
HackingFinancial ServicesFinanceSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDHighContained

The Andovers Federal Credit Union

bd_c149ba74f392861b · schema v1 · pii pii-v1

Severity

High

Discovered

Dec 10, 2023

Filed

Apr 11, 2024

To disclose

18 weeks

Affected · nationwide

43,43563 in this filing

Confidence

75%
Full breach record for The Andovers Federal Credit Union →

Bradford-Scott Data, LLC, a service provider for The Andovers Federal Credit Union, reported a data breach affecting 63 Maine residents. The breach, which occurred on May 19, 2023 and was discovered on December 10, 2023, resulted from an external system breach (hacking). The compromised information includes names and Social Security Numbers. Affected individuals were notified on April 11, 2024, and offered 12 months of credit monitoring and identity theft restoration services through IDX.

Maine clockDiscovered Dec 10, 2023 → Filed with AG Apr 11, 2024123d ✗ ME AG >90d18 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 205 days
discovery → filing · 18 weeks / 123 days

May 19, 2023

Begins

Dec 10, 2023

Discovered

Apr 11, 2024

Filed

vs. sector median

+9 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed43,435 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.