Social EngineeringPhishingStolen CredentialsDelayed DiscoveryIDENTITY_BASICLowContained
CREDIT UNION OF SOUTHERN CALIFORNIA
bd_df0b12f39d31af62 · schema v1 · pii pii-v1
Full breach record for CREDIT UNION OF SOUTHERN CALIFORNIA →Credit Union of Southern California (CU SoCal) notified consumers of a data breach involving the email account of a former CalBear employee. Unauthorized access occurred between Jan 11-31, 2023. CU SoCal reset passwords, engaged forensic specialists, and offered 24 months of credit monitoring. No actual misuse confirmed. Data potentially involved: names.
Vermont clock✗ VT AG >45 bday15 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_8f27d1346d2ebeffCalifornia State AGfiled 2023-05-18Candidate
- bd_bcc967111ff13a78California State AGfiled 2023-06-01(14d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-05-18-credit-union-southern-california-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 18, 2023
- Raw hash
- bf30dd37591dca0c7a8a1c28fca366035f5bcf2834af5e5d568b15ca5d8e8bf6
Reporting entity
- Name
- CREDIT UNION OF SOUTHERN CALIFORNIAnorm: credit union of southern california
Victim entity
- Name
- CREDIT UNION OF SOUTHERN CALIFORNIAnorm: credit union of southern california
Incident
- Discovered
- Jan 31, 2023
- Materiality determined
- —
- Notification sent
- May 18, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 15 weeks(107 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.