Social EngineeringFinancial ServicesFinancePhishingCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

TEXELL Credit Union

bd_ce65e1e97e4a67bc · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 14, 2020

Filed

Sep 3, 2020

To disclose

16 weeks

Affected

48state residents only

Linked

4 filings

Confidence

67%

Full breach record for TEXELL Credit Union →

Texell Credit Union notified members of a data security incident discovered on May 14, 2020, involving unauthorized access to an employee's email account. The breach exposed names, addresses, Social Security numbers, and account numbers. Texell engaged forensic investigators, secured accounts, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 16 weeks / 112 days

May 14, 2020

Discovered

Sep 3, 2020

Filed

vs. sector median

+8 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_5991d4e19ccc51042020-09-03Verified
Massachusetts State AGbd_e736844a1caebc742020-09-03Verified
New Hampshire State AGbd_2d88f8eccf05df212020-09-04 · +1dVerified

Name: TEXELL Credit Union
norm: texell credit union

Name: TEXELL Credit Union
norm: texell credit union
Industry: Financial Servicesllm

Discovered: May 14, 2020
Materiality determined: —
Notification sent: —
Affected individuals: 48state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Insider
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: phishing_link

During the incident: Changed the password for the email account
Launched an investigation
Engaged a data mining firm to conduct an extensive review of the data
Taken steps to increase the security of the email accounts in our environment
Offering free identity monitoring and identity recovery services for 12 months through ID Experts
Changes made: Taken steps to increase the security of the email accounts in our environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(112 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGSep 3 · first

Massachusetts State AGSep 3 · first

Montana State AGSep 3 · first · this page

New Hampshire State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Texell-Credit-Union-Sample-Notification-Letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 3, 2020
Raw hash: bdaa0e4625c0a730f8c7df590ffb5dcaa2d5c2d5dc14ce4a3d25d53fb39d31ec

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityTEXELL Credit Union

Victim entityTEXELL Credit Union

Incidentdiscovered May 14, 2020

Stated responseChanged the password for the email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov