PhysicalSkimmerCustomer Data InvolvedFINANCIAL_ACCOUNTAUTHENTICATIONLowContained
TRAVIS CREDIT UNION
bd_ecca38076d14fdcb · schema v1 · pii pii-v1
Full breach record for TRAVIS CREDIT UNION →Travis Credit Union notified members of a data breach involving skimming devices placed on a drive-up ATM at its Dixon, CA branch. The incident occurred between July 16 and August 22, 2018. Skimmers captured card numbers, expiration dates, and PINs. The credit union deactivated affected cards, restored fraudulent losses, and notified law enforcement.
California clockDiscovered Sep 5, 2018 → Notified Sep 5, 20180d ✓ CA 60-day OK20 days discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-140134
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 25, 2018
- Raw hash
- 072ec3b154293cb15739613bf979feb905c4b9cfa172d67f4a6f8e22b1c1d466
Reporting entity
- Name
- TRAVIS CREDIT UNIONnorm: travis credit union
Victim entity
- Name
- TRAVIS CREDIT UNIONnorm: travis credit union
Incident
- Discovered
- Sep 5, 2018
- Materiality determined
- —
- Notification sent
- Sep 5, 2018
- Affected individuals
- Not disclosed
- Data types
- FINANCIAL_ACCOUNTAUTHENTICATION
- Attack vector
- Unknown
- MITRE ATT&CK
- T1539 Skimming
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 20 days(20 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 0d
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 5, 2018→ Notified: Sep 5, 20180d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.