PhysicalSkimmerCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
UNCLE Credit Union
bd_d549dd5f90ee8b61 · schema v1 · pii pii-v1
Full breach record for UNCLE Credit Union →UNCLE Credit Union notified members of a data breach involving a card skimmer installed at a Tracy Financial Center ATM between Dec 29, 2021, and Jan 9, 2022. The skimmer captured magnetic stripe data (cardholder name, number, expiration date). The credit union shut down compromised cards, issued replacements, and notified law enforcement.
California clockDiscovered Jan 16, 2022 → Notified Jan 19, 20223d ✓ CA 60-day OK10 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-550395
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 26, 2022
- Raw hash
- 8eb4fd2a1d7c325eebe369fc6de5655809e6723ebfbfa3f5aeabedef7ceaefe3
Reporting entity
- Name
- UNCLE Credit Unionnorm: uncle credit union
Victim entity
- Name
- UNCLE Credit Unionnorm: uncle credit union
Incident
- Discovered
- Jan 16, 2022
- Materiality determined
- —
- Notification sent
- Jan 19, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 10 days(10 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 3d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 16, 2022→ Notified: Jan 19, 20223d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.