AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDFinancial accountFinancialMediumResolved

STANFORD Federal Credit Union

bd_ef3260af4d3bdc2f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 30, 2014

Filed

Jun 11, 2014

To disclose

6 weeks

Affected

Not disclosed

Confidence

64%

Full breach record for STANFORD Federal Credit Union →

Stanford Federal Credit Union disclosed an incident on April 30, 2014, where a staff member mistakenly sent personal information (name, address, member number, tax ID, loan offers, credit info) to a non-employee member. The error was discovered within minutes, and the recipient destroyed the data before viewing it. The credit union offered one year of Experian credit monitoring and implemented new software and operational protocols to prevent recurrence.

J jump to incidentP pin to compareR raw source

California clockDiscovered Apr 30, 2014 → Notified Jun 9, 201440d ✓ CA 60-day OK6 weeks discovery → filing

Incident timeline

discovery → filing · 6 weeks / 42 days

Apr 30, 2014

Begins

Apr 30, 2014

Discovered

Jun 11, 2014

Filed

vs. sector median

2 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: STANFORD Federal Credit Union
norm: stanford federal credit union

Name: STANFORD Federal Credit Union
norm: stanford federal credit union
Industry: Financial Servicesllm

Discovered: Apr 30, 2014
Breach occurred: Apr 30, 2014
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 9, 2014
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountFinancial
Attack vector: Unknown
Threat actor: Internal

During the incident: Worked with the individual to ensure the data was destroyed before being viewed
Offered a complimentary one-year membership in Experian’s Alert program
Changes made: Installed additional software systems
Instituted new operational protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(42 days from discovery to filing)
Compliance flags: CA 60-day OK · 40d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Apr 30, 2014
→ Notified: Jun 9, 2014
40d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Apr 30, 2014 → Notified: Jun 9, 2014	40d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-45455
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 11, 2014
Raw hash: a0b57ccadb98b6c391c2e8062217b08fa520a1bf03b313f6cd30f01cbb8512c0

Reporting entitySTANFORD Federal Credit Union

Victim entitySTANFORD Federal Credit Union

Incidentdiscovered Apr 30, 2014

Stated responseWorked with the individual to ensure the data was destroyed before being viewed

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov