HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
COMMUNITY POWERED FEDERAL CREDIT UNION
bd_fde7f7c98c36da6e · schema v1 · pii pii-v1
Full breach record for COMMUNITY POWERED FEDERAL CREDIT UNION →Community Powered Federal Credit Union (CPFCU) notified Delaware residents of a data breach involving unauthorized access to an employee email account from June 23, 2022, to July 8, 2022. The unauthorized third party accessed personal information including names, Social Security numbers, and account numbers. CPFCU secured the account, engaged forensic investigators, and offered one year of complimentary credit monitoring via Experian IdentityWorks.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_ccc690a24addcbc5Maine State AGfiled 2022-10-24Candidate
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2022/11/CPFCU-Sample-Notification-Letter-A-Adult-1-Year-CM.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 24, 2022
- Raw hash
- e6e07d493824ac22ab4302274b2099ba2377c728d3fa61c4e94af84e514a5036
Reporting entity
- Name
- COMMUNITY POWERED FEDERAL CREDIT UNIONnorm: community powered federal credit union
Victim entity
- Name
- COMMUNITY POWERED FEDERAL CREDIT UNIONnorm: community powered federal credit union
Incident
- Discovered
- Jul 8, 2022
- Materiality determined
- —
- Notification sent
- Oct 24, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 15 weeks(108 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.