HackingVulnerability ExploitStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCriticalContained
PATELCO CREDIT UNION
bd_d750bc07711391c8 · schema v1 · pii pii-v1
Full breach record for PATELCO CREDIT UNION →Patelco Credit Union reported a data breach affecting approximately 100,000 individuals. Unauthorized access occurred on August 14, 2024, via exploitation of a public-facing application. The attacker exfiltrated personal information including names, addresses, SSNs, and financial account details. Patelco engaged forensic investigators, notified law enforcement, and offered credit monitoring to affected members.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed100,000 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/patelco-credit-union-20240826.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 26, 2024
- Raw hash
- 465bb320f04a933b55606b8c112fadd6905cb2e03b0950699092f028b6b03f16
Reporting entity
- Name
- PATELCO CREDIT UNIONnorm: patelco credit union
- Domain
- patelco.org
Victim entity
- Name
- PATELCO CREDIT UNIONnorm: patelco credit union
- Domain
- patelco.org
Incident
- Discovered
- Aug 20, 2024
- Materiality determined
- —
- Notification sent
- Aug 26, 2024
- Affected individuals
- 100,000
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 days(6 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.