HackingFinancial ServicesFinanceCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
First Commonwealth Federal Credit Union
bd_dcab9d258550b385 · schema v1 · pii pii-v1
Full breach record for First Commonwealth Federal Credit Union →First Commonwealth Federal Credit Union reported an external system breach occurring on or around June 26, 2024, discovered on July 1, 2024. An unauthorized actor acquired files and data containing member personal information including names, Social Security numbers, dates of birth, addresses, and account numbers. A total of 98,809 individuals were affected, including 28 Maine residents. Written notice was sent August 2, 2024. IDX identity theft protection services were offered for 12 months.
Maine clockDiscovered Jul 1, 2024 → Filed with AG Aug 2, 202432d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_8dd610fc000eee78Leak Sitemeowfiled 2024-07-16(17d gap)Verified by operator
Regulatory filings (2) · sorted by filing gap
- bd_2dbb64663be5cea6Montana State AGfiled 2024-08-02Verified by operator
- bd_8d32f8044fdebc31Vermont State AGfiled 2024-08-02Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4fce57ae-eb7a-4924-9a67-2e29c817754b.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 2, 2024
- Raw hash
- f78cd16e70750c9eeb813fb63dfa661b302cf56f71cc9876e0dd1ac6be2588ff
Reporting entity
- Name
- First Commonwealth Federal Credit Unionnorm: first commonwealth federal credit union
- Domain
- firstcomcu.org
- Industry
- Financial Services
Victim entity
- Name
- First Commonwealth Federal Credit Unionnorm: first commonwealth federal credit union
- Domain
- firstcomcu.org
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Jul 1, 2024
- Materiality determined
- —
- Notification sent
- Aug 2, 2024
- Affected individuals
- 28
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified relevant regulators as necessaryNotified three major credit reporting agencies: Equifax, Experian, TransUnion
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- ME AG >30d · 32d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 1, 2024→ Filed with AG: Aug 2, 202432d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.