DisclosureLens
HackingFinancial ServicesFinanceCustomer Data InvolvedGovernment IDPIIHighContained

Summit Credit Union

bd_dbc0ac77f5a22852 · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 29, 2021

Filed

Aug 24, 2021

To disclose

26 days

Affected · nationwide

8,4674 in this filing

Linked

2 records

Confidence

66%
Full breach record for Summit Credit Union →2 incidents on file

Summit Credit Union experienced an external system breach (hacking) between February 2 and March 8, 2021, discovered on July 29, 2021. The incident affected 8,467 individuals, including 4 Maine residents. Acquired data included names and Social Security Numbers. The credit union notified consumers in writing on August 24, 2021, and provided 12 months of credit monitoring and identity protection services via Experian.

Maine clockDiscovered Jul 29, 2021 → Filed with AG Aug 24, 202126d ✓ ME AG ≤30d26 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 177 days
discovery → filing · 26 days

Feb 2, 2021

Begins

Jul 29, 2021

Discovered

Aug 24, 2021

Filed

vs. sector median

4 wks faster

This filing is one of 2 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.