UnknownFinancial ServicesFinanceGovernment IDFinancial accountPCIHigh

CONNEX CREDIT UNION

bd_fd72acc36513bed6 · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Aug 8, 2025

To disclose

—

Affected

2,001state residents only

Linked

10 records

Confidence

95%

Full breach record for CONNEX CREDIT UNION →

Connex Credit Union reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-08-08. 2,001 Massachusetts residents were affected.

J jump to incidentP pin to compareR raw source

Massachusetts clock✓ MA credit monitoring due

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Aug 8, 2025

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 10 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteqilinbd_15dec55845d48b4c2025-06-18 · +51dVerified

Regulatory filings (8) · sorted by filing gap

South Carolina State AGbd_11cb4d7ecd0a90f92025-08-08Verified
Texas State AGbd_383732811c88e6d52025-08-08Verified
Maine State AGbd_975123fa51efd59c2025-08-08Verified
Indiana State AGbd_14a6428040752aca2025-08-07 · +1dVerified

Show 4 more filings ↓up to 1d gap

California State AGbd_2d7ba7fcb1ed31622025-08-07 · +1dVerified
Vermont State AGbd_b671a1b2a1a142f42025-08-07 · +1dVerified
Montana State AGbd_beda1a58d91c700c2025-08-07 · +1dVerified
Nebraska State AGbd_d7624e00a1f3469c2025-08-07 · +1dVerified

Name: CONNEX CREDIT UNION
norm: connex credit union
Domain: connexcu.org

Name: CONNEX CREDIT UNION
norm: connex credit union
Domain: connexcu.org
Industry: Financial Servicesregulator portal

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 2,001state-resident count only
Data types: Government IDFinancial accountPCI
Data elements: Social Security numberFinancial account numberDriver's licence numberPayment card number
Stated not affected: Medical information
The filing states these were not involved. Categories absent from both lists were not addressed either way.
Attack vector: Unknown

Compliance flags: MA credit monitoring due
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Indiana State AGAug 7 · first

California State AGAug 7 · first

Vermont State AGAug 7 · first

Montana State AGAug 7 · first

Nebraska State AGAug 7 · first

South Carolina State AG+1d

Texas State AG+1d

Maine State AG+1d

Massachusetts State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/data-breach-report-2025/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 8, 2025
Raw hash: ebeb2dcb3937e25765519a71cf8899f0cf9fdfa339d7b29b7a60a50340c1c680

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entityCONNEX CREDIT UNION

Victim entityCONNEX CREDIT UNION

IncidentUnknown

ComplianceMA credit monitoring due

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov