DOW CREDIT UNION

Dow Credit Union reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-08-23. 18 Massachusetts residents were affected. The report records the breach type as electronic.

Dow Credit Union notified affected individuals of a data breach involving a third-party MOVEit file transfer service provider. Unauthorized parties exploited a previously unknown vulnerability (zero-day) in MOVEit starting in late May 2023. Dow Credit Union learned of the incident on August 8, 2023. The breach exposed names, addresses, SSNs, account numbers, balances, and dates of birth. Dow Credit Union is offering one year of Experian IdentityWorks credit monitoring and is reviewing its relationship with the provider.

Dow Credit Union reported a data breach impacting two Maine residents following a third-party incident involving the MOVEit vulnerability. The breach occurred between May 30 and May 31, 2023, and was discovered on August 11, 2023. Affected individuals' names and Social Security numbers were compromised. The credit union began notifying consumers on August 23, 2023, and offered 12 months of identity protection services through Experian.