UnknownFinancial ServicesFinanceGovernment IDFinancial accountPCIMedium

LAFAYETTE FEDERAL CREDIT UNION

bd_ce94dbde1e7d94ab · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 20, 2025

To disclose

—

Affected

757state residents only

Linked

10 filings

Confidence

95%

Full breach record for LAFAYETTE FEDERAL CREDIT UNION →

Lafayette Federal Credit Union reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-03-20. 757 Massachusetts residents were affected.

J jump to incidentP pin to compareR raw source

Massachusetts clock✓ MA credit monitoring due

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Mar 20, 2025

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 10 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

California State AGbd_6ff5139107b80bca2025-03-20Verified
Nebraska State AGbd_c0296713adffca892025-03-20Verified
Montana State AGbd_d6cea7531eafa3922025-03-20Candidate
Maine State AGbd_d80aaf6241c8160b2025-03-20Verified by operator

Show 5 more filings ↓up to 132d gap

Illinois State AGbd_c604145f1bf0e4d72025-03-01 · +19dVerified by operator
California State AGbd_025c5df977a8fe6d2025-07-14 · +116dVerified by operator
Nebraska State AGbd_58f8985131c5bdf42025-07-14 · +116dVerified by operator
Texas State AGbd_8bc2e38bdebff7f22025-07-15 · +117dVerified
Maine State AGbd_b692cb281903e8c52025-07-30 · +132dVerified by operator

Name: LAFAYETTE FEDERAL CREDIT UNION
norm: lafayette federal credit union
Domain: lfcu.org

Name: LAFAYETTE FEDERAL CREDIT UNION
norm: lafayette federal credit union
Domain: lfcu.org
Industry: Financial Servicesregulator portal

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 757state-resident count only
Data types: Government IDFinancial accountPCI
Data elements: Social Security numberFinancial account numberPayment card number
Stated not affected: Medical informationDriver's licence number
The filing states these were not involved. Categories absent from both lists were not addressed either way.
Attack vector: Unknown

Compliance flags: MA credit monitoring due
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 7 states

View merged incident ↗

Illinois State AGMar 1 · first

California State AG+19d

Nebraska State AG+19d

Montana State AG+19d

Maine State AG+19d

Massachusetts State AG+19d · this page

California State AG+135d

Nebraska State AG+135d

Texas State AG+136d

Maine State AG+151d

Pattern: first filing Mar 1 (IL), last Jul 30 (ME) — a 151-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/data-breach-report-2025/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 20, 2025
Raw hash: acb9df0aee07ef1fddd7c323c12a20c5e7990abfe45a824da56783e46a6dc12d

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityLAFAYETTE FEDERAL CREDIT UNION

Victim entityLAFAYETTE FEDERAL CREDIT UNION

IncidentUnknown

ComplianceMA credit monitoring due

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov