HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumActive
Lincoln Public School Employees Federal Credit Union
bd_d2c5d8f551efe0be · schema v1 · pii pii-v1
Full breach record for Lincoln Public School Employees Federal Credit Union →Public Employees Credit Union notified the NH Attorney General of a breach affecting 4 NH residents. Unauthorized access occurred on April 24, 2022, and was discovered on April 26, 2022. Exposed data included names, SSNs, and account numbers. The credit union engaged a cybersecurity firm, reported to law enforcement, and offered 1 year of credit monitoring via Experian.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_26f2e5b50c05219cLeak Siteavoslockerfiled 2022-12-26(224d gap)Verified by operator
Regulatory filings (2) · sorted by filing gap
- bd_04c6939e38fddd10Maine State AGfiled 2022-05-16Verified by operator
- bd_2cbcbf70fb3e415dMontana State AGfiled 2022-05-16Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/public-employees-credit-union-20220516.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 16, 2022
- Raw hash
- ce2936bd508880e41bc3d95a999e3d0c614e1756773c706490a780338c0cb8e5
Reporting entity
- Name
- Patrick Haggertynorm: patrick haggerty
- Domain
- patrickhaggerty.com
Victim entity
- Name
- Lincoln Public School Employees Federal Credit Unionnorm: lincoln public school employees federal credit union
- Industry
- financial_services
Incident
- Discovered
- Apr 26, 2022
- Materiality determined
- —
- Notification sent
- May 16, 2022
- Affected individuals
- 4
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General's Office
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 20 days(20 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.