HackingVulnerability ExploitSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
DOW CREDIT UNION
bd_e170f9c8ca9c5bb0 · schema v1 · pii pii-v1
Full breach record for DOW CREDIT UNION →Dow Credit Union reported a data breach impacting two Maine residents following a third-party incident involving the MOVEit vulnerability. The breach occurred between May 30 and May 31, 2023, and was discovered on August 11, 2023. Affected individuals' names and Social Security numbers were compromised. The credit union began notifying consumers on August 23, 2023, and offered 12 months of identity protection services through Experian.
Maine clockDiscovered Aug 11, 2023 → Filed with AG Aug 23, 202312d ✓ ME AG ≤30d12 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_bef092a307c41513Montana State AGfiled 2023-08-23Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/694710ee-2972-4d5f-9aba-10b61b5d4c0d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 23, 2023
- Raw hash
- eb5f7814e1d4d6adadfc3da71a64114fd5422ea50f868b96c7ca426149ebf832
Reporting entity
- Name
- DOW CREDIT UNIONnorm: dow credit union
Victim entity
- Name
- DOW CREDIT UNIONnorm: dow credit union
Incident
- Discovered
- Aug 11, 2023
- Materiality determined
- —
- Notification sent
- Aug 23, 2023
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
Compliance
- Time to disclose
- 12 days(12 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 12d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 11, 2023→ Filed with AG: Aug 23, 202312d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.