MalwareFinancial ServicesFinanceRansomwareRansom DemandedData EncryptedDelayed DiscoveryCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
PATELCO CREDIT UNION
bd_f1d3d40e3783e96c · schema v1 · pii pii-v1
Full breach record for PATELCO CREDIT UNION →Patelco Credit Union (Dublin, CA) suffered a ransomware attack in which an unauthorized party gained access to its network on May 23, 2024, leading to access to member and employee databases by June 29, 2024. The breach was discovered August 14, 2024. Data involved includes names, Social Security numbers, driver's license numbers, dates of birth, and email addresses. 1,009,472 individuals were affected nationally; 269 were Maine residents. Experian IdentityWorks (24-month) was offered.
Maine clockDiscovered Aug 14, 2024 → Filed with AG Sep 23, 202440d ⏱ ME AG >30d6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 9 about the same incident.View merged incident
A leak claim by ransomhub about this victim predates this filing by 86 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_c9b83b21890cb423Leak Siteransomhubfiled 2024-08-16(37d gap)Verified by operator
- bd_d86fc539771c8086Leak Siteransomhubfiled 2024-06-29(86d gap)Verified by operator
Regulatory filings (6) · sorted by filing gap
- bd_c88dac2c250735a6Washington State AGfiled 2024-09-23Verified
- bd_272abed51034ca0cOregon State AGfiled 2024-08-20(34d gap)Verified
- bd_3490e911272cfc69Montana State AGfiled 2024-08-20(34d gap)Verified by operator
- bd_5c6d990f0a189873Maine State AGfiled 2024-08-20(34d gap)Verified
Show 2 more filings ↓Show fewer ↑up to 34d gap
- bd_99719e822b1c011bWashington State AGfiled 2024-08-20(34d gap)Candidate
- bd_b0617d89cdc9b416California State AGfiled 2024-08-20(34d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/75619fc1-b3ca-440d-85e3-4367b1017ea3.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 23, 2024
- Raw hash
- cf7989c1c8d18fafdf74b72b0d1341a451d791297a57a0c2259534b0ad2b3966
Reporting entity
- Name
- PATELCO CREDIT UNIONnorm: patelco credit union
- Domain
- patelco.org
- Industry
- Financial Services
Victim entity
- Name
- PATELCO CREDIT UNIONnorm: patelco credit union
- Domain
- patelco.org
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Aug 14, 2024
- Materiality determined
- —
- Notification sent
- Aug 20, 2024
- Affected individuals
- 269
- Data types
- PIIIDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Maine Attorney General
Compliance
- Time to disclose
- 6 weeks(40 days from discovery to filing)
- Compliance flags
- ME AG >30d · 40dLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 14, 2024→ Filed with AG: Sep 23, 202440d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.