HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHighContained
Quorum Federal Credit Union
bd_d656dc22c94733b0 · schema v1 · pii pii-v1
Full breach record for Quorum Federal Credit Union →Quorum Federal Credit Union reported a breach occurring May 28-30, 2023, discovered June 20, 2023. Approximately 17,054 individuals were affected, including 23 Maine residents. The incident involved unauthorized access to member records containing names, personal identifiers, and financial account or credit/debit card numbers (with security codes/PINs). The credit union provided written notification and offered one year of credit monitoring and identity theft restoration services through Kroll.
Maine clockDiscovered Jun 20, 2023 → Filed with AG Jul 17, 202327d ✓ ME AG ≤30d27 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_e8c795bcc5dc102cLeak Sitedispossessorfiled 2023-10-18(93d gap)Verified by operator
Regulatory filings (3) · sorted by filing gap
- bd_82052e2f5c4e9a44Montana State AGfiled 2023-07-17Candidate
- bd_b0840f575c1c318bCalifornia State AGfiled 2023-07-17Verified
- bd_fc30fcc8f9d3ce42Washington State AGfiled 2023-07-17Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/001bef6c-ee6a-4fd2-adcc-14b914635f07.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 17, 2023
- Raw hash
- da80a00f17be421f191e77cddb341c5843e9914b9d796aefc5a1abe4a5f0581c
Reporting entity
- Name
- Quorum Federal Credit Unionnorm: quorum federal credit union
- Domain
- quorumfcu.org
Victim entity
- Name
- Quorum Federal Credit Unionnorm: quorum federal credit union
- Domain
- quorumfcu.org
Incident
- Discovered
- Jun 20, 2023
- Materiality determined
- —
- Notification sent
- Jul 17, 2023
- Affected individuals
- 17,054
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General's Office
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 27 days(27 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 27d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 20, 2023→ Filed with AG: Jul 17, 202327d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.