Social EngineeringCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMediumResolved
HawaiiUSA Federal Credit Union
bd_e135c11dc67688de · schema v1 · pii pii-v1
Full breach record for HawaiiUSA Federal Credit Union →HawaiiUSA Federal Credit Union reported a data breach affecting 20,889 individuals, which occurred on December 12, 2022, and was discovered on March 15, 2023. The incident, attributed to social engineering, resulted in the compromise of names and financial account or card numbers with their corresponding access codes. The credit union began notifying affected individuals on April 7, 2023, and offered one year of credit monitoring and identity theft protection services through Experian.
Maine clockDiscovered Mar 15, 2023 → Filed with AG Apr 7, 202323d ✓ ME AG ≤30d23 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_18a16aff9e95f0aeCalifornia State AGfiled 2023-04-07Candidate
- bd_6ac1c4bbe692f91fHawaii State AGfiled 2023-04-07Verified
- bd_f5f10922706de3d1Montana State AGfiled 2023-04-07Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/dcd41e8a-42b1-4ce0-834d-98e626d04333.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 7, 2023
- Raw hash
- 19aa11ab6848370a37bf760b3d38be34e100a74ae661a4704dca7024614eaf4c
Reporting entity
- Name
- HawaiiUSA Federal Credit Unionnorm: hawaiiusa federal credit union
Victim entity
- Name
- HawaiiUSA Federal Credit Unionnorm: hawaiiusa federal credit union
Incident
- Discovered
- Mar 15, 2023
- Materiality determined
- —
- Notification sent
- Apr 7, 2023
- Affected individuals
- 20,889
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Phishing
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 23 days(23 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 23d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 15, 2023→ Filed with AG: Apr 7, 202323d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.