Ellafi Federal Credit Union
ent_019e1f2310b636ce916839e322128997
Disclosures
4
State AG · 4 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
17,627
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Ellafi Federal Credit Union
- Normalized
- ellafi federal credit union— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 254900O86JRT86YLQO47
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (4)newest first
- 🦞Maine State AGas victim2025-12-27
Ellafi Federal Credit Union, a financial services organization, reported a data breach affecting 40 Maine residents. The breach, described as an external system breach (hacking), occurred on October 14, 2025, and was discovered on November 20, 2025. Affected individuals were notified on December 23, 2025, and offered 12 months of credit monitoring and identity protection services from IDX. The total number of individuals affected, including those outside of Maine, was 17,627.
- 🍁Vermont State AGas victim2025-12-27
Ellafi Federal Credit Union experienced unauthorized access to files containing personal information, including names, SSNs, and credit/debit card numbers, on October 14, 2025. The credit union engaged cybersecurity experts, notified the FBI, and is offering 12 months of complimentary identity protection services. No evidence of misuse was found.
- ⛰️New Hampshire State AGas victim2025-12-26
Ellafi Federal Credit Union notified the New Hampshire Attorney General of a data security incident affecting approximately 49 NH residents. Unauthorized access to systems occurred around October 14, 2025, with confirmation of accessed PII (names, SSNs, card numbers) on November 20, 2025. Notifications were sent on December 23, 2025. The credit union engaged forensic experts, notified the FBI, and provided 12 months of credit monitoring via IDX.
- 🏎️Indiana State AGas victim2025-12-23
Ellafi Federal Credit Union reported a data breach to the Indiana Attorney General. The breach occurred on 2025-10-14 and was reported on 2025-12-23. 6 Indiana residents were affected. 17,627 individuals affected in total.