HackingFinancial ServicesFinanceSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Financial accountLowContained

PARTNER COLORADO CREDIT UNION

bd_d38d58e400d5c80c · schema v1 · pii pii-v2

Severity

Low

Discovered

—

Filed

Oct 1, 2026

To disclose

—

Affected

17state residents only

Confidence

68%

Full breach record for PARTNER COLORADO CREDIT UNION →

Partner Colorado Credit Union notified Massachusetts residents that a security breach occurred at its service provider, Mercadien P.C. CPAs, between September 17 and October 9, 2025. The incident exposed names and account numbers. Sensitive credentials (PINs, passwords, online banking logins) and Social Security numbers were not compromised. The letter was dated October 19, 2026.

J jump to incidentP pin to compareR raw source

Incident timeline

Sep 17, 2025

Begins

Oct 1, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed17 affectedView incident

Name: PARTNER COLORADO CREDIT UNION
norm: partner colorado credit union
Domain: partnercoloradocu.org

Name: PARTNER COLORADO CREDIT UNION
norm: partner colorado credit union
Domain: partnercoloradocu.org
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Sep 17, 2025 – Oct 9, 2025
Materiality determined: —
Notification sent: Oct 19, 2026
Affected individuals: 17state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Third-Party / Supply Chain
Third party: via Mercadien P.C. CPAs
Initial access: supply_chain

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1842-partner-colorado-credit-union/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 1, 2026
Raw hash: 8be8301c7de43c43a6244193f68d9aed08b43a515783fb09b1c05ff9b0088db7

Reporting entityPARTNER COLORADO CREDIT UNION

Victim entityPARTNER COLORADO CREDIT UNION

IncidentThird-Party / Supply Chain

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov