HackingFinancial ServicesFinanceVulnerability ExploitData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountPIIMediumContained

Quorum Federal Credit Union

bd_fc30fcc8f9d3ce42 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 20, 2023

Filed

Jul 17, 2023

To disclose

27 days

Affected

802state residents only

Linked

7 filings

Confidence

69%

Full breach record for Quorum Federal Credit Union →2 incidents on file

Quorum Federal Credit Union experienced unauthorized access to files containing personal information of 802 Washington residents due to a vulnerability in the MOVEit file transfer tool. The incident occurred between May 28 and May 31, 2023, and was discovered on June 20, 2023. Affected data included names, SSNs, driver's license numbers, financial account numbers, and payment card information. Notifications were sent on July 17, 2023, with credit monitoring services offered.

J jump to incidentP pin to compareR raw source

Washington clock✓ WA AG ≤30d27 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 23 days

discovery → filing · 27 days

May 28, 2023

Begins

Jun 20, 2023

Discovered

Jul 17, 2023

Filed

vs. sector median

5 wks faster

This filing is one of 7 about the same incident.View merged incident

Part of Progress Software Corporation supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitedispossessorbd_e8c795bcc5dc102c2023-10-18 · +93dVerified by operator
Leak Sitecl0pbd_a2debe21896a7c302023-07-05 · +12dVerified by operator

Regulatory filings (4) · sorted by filing gap

Montana State AGbd_82052e2f5c4e9a442023-07-17Candidate
California State AGbd_b0840f575c1c318b2023-07-17Verified
Massachusetts State AGbd_c865abcecff2d4a22023-07-17Verified
Maine State AGbd_d656dc22c94733b02023-07-17Verified

Name: Quorum Federal Credit Union
norm: quorum federal credit union
Domain: quorumfcu.org

Name: Quorum Federal Credit Union
norm: quorum federal credit union
Domain: quorumfcu.org
Industry: Financial Servicesllm

Discovered: Jun 20, 2023
Breach occurred: May 28, 2023 – May 31, 2023
Undetected for: 23 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 17, 2023
Affected individuals: 802state-resident count only
Data types: Identity (basic)Government IDFinancial accountPII
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birth
WA-stated cause: Unauthorized Access
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found after the fact
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Engaged a cybersecurity firm to assist with an investigation
Took the actions recommended by Progress Software to resolve the issue
Conducted a thorough review of the files involved
Mailed notification letters to the Washington residents
Offered the Washington residents a complimentary, one-year membership to credit monitoring and identity theft protection services
Established a dedicated call center
Changes made: Use the findings from the investigation to look for additional opportunities to further strengthen its cybersecurity
Implement additional safeguards and security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 days(27 days from discovery to filing)
Compliance flags: WA AG ≤30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGJul 17 · first

California State AGJul 17 · first

Massachusetts State AGJul 17 · first

Maine State AGJul 17 · first

Washington State AGJul 17 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA25864.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 17, 2023
Raw hash: c6b8971827888c90fb95932f9225e4753095379cb03cae6d2459831f64753f74

Linked disclosures

Ransomware claims (2)

Regulatory filings (4) · sorted by filing gap

Reporting entityQuorum Federal Credit Union

Victim entityQuorum Federal Credit Union

Incidentdiscovered Jun 20, 2023

Stated responseEngaged a cybersecurity firm to assist with an investigation

ComplianceWA AG ≤30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com