UNIVERSITY FEDERAL CREDIT UNION
ent_019e227b35037651e5bcde01862c6b46
Disclosures
3
State AG · 3 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
29
as filed · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- UNIVERSITY FEDERAL CREDIT UNION
- Normalized
- university federal credit union— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 5493007XAKU2Q6LGXD23
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (3)newest first
- 🍁Vermont State AGas victim2023-10-10
University Federal Credit Union (UFCU) notified consumers on October 10, 2023, of a data breach involving its vendor, Progress Software's MOVEit transfer platform. The incident, discovered on September 15, 2023, involved unauthorized access to files containing member personal information (including SSNs) copied from the MOVEit platform. No evidence of financial fraud was found. UFCU engaged third-party investigators and offered 12 months of credit monitoring. The breach affects members across multiple US states.
- 🦞Maine State AGas victim2023-10-09
University Federal Credit Union reported a data breach affecting 29 Maine residents. The breach, which occurred between May 7 and May 27, 2023, was discovered on September 15, 2023. The incident was a result of the MOVEit Transfer vulnerability, an external system breach. The compromised information includes names in combination with financial account or credit/debit card numbers and their associated security codes or PINs. Affected individuals were notified on October 10, 2023, and offered 12 months of credit monitoring and identity theft protection services through Experian.
- 🐻California State AGas victim2023-10-09
University Federal Credit Union notified members that their personal information, potentially including Social Security numbers, was accessed via a global data security event affecting the MOVEit file transfer software vendor. The breach occurred between May 27 and May 31, 2023, and was discovered on September 15, 2023. Files were copied and removed from the MOVEit platform by an unauthorized party. UFCU engaged third-party professionals and is offering 12 months of complimentary identity monitoring through Experian.