HUD Federal Credit Union
bd_d560d41521f74042 · schema v1 · pii pii-v1
Full breach record for HUD Federal Credit Union →3 incidents on fileHUD Federal Credit Union notified the NH Attorney General that starting December 6, 2019, a third party illegally accessed six employee email accounts via phishing. The incident affected three New Hampshire residents. Affected data included names, addresses, dates of birth, SSNs, financial account numbers, debit/credit card numbers, and limited medical information. HUD contained the incident by securing accounts and engaged a forensic firm. Notification letters were mailed on August 20, 2020.
J jump to incidentP pin to compareR raw source
Incident timeline
Dec 6, 2019
Begins
Dec 6, 2019
Discovered
Aug 24, 2020
Filed
vs. sector median
+29 wks slower
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- Massachusetts State AGbd_28e66ae51af6cc882020-08-25 · +1dVerified
- Indiana State AGbd_ffcd6413131266702020-08-20 · +4dVerified
Filing propagation · 3 filings · 3 states
View merged incident ↗Pattern: first filing Aug 20 (IN), last Aug 25 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.