Franklin Mint Federal Credit Union
ent_8afa048b0217a397c94f8317
Disclosures
11
State AG · Leak Site · 9 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
140,963
nationwide · State AG ME
Leak-site claims
2
unverified actor claims
Identity resolution
- Canonical name
- Franklin Mint Federal Credit Union
- Normalized
- franklin mint federal credit union— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- fmfcu.org
Disclosure history (11)newest first
- California State AGas victim2023-07-27
Franklin Mint Federal Credit Union (FMFCU) disclosed a data security incident involving the MOVEit Transfer software vulnerability. On June 1, 2023, FMFCU became aware of a CISA alert regarding a critical vulnerability in MOVEit. An investigation revealed that data belonging to FMFCU members may have been acquired without authorization. The breach date is listed as May 31, 2023. Affected data may include personal information, member numbers, and partial credit card numbers. FMFCU patched the system, engaged external experts, reported to law enforcement, and is offering 12 months of Experian IdentityWorks to affected members.
- New Hampshire State AGas victim2023-07-21
Franklin Mint Federal Credit Union (FMFCU) notified the NH AG of a data security incident involving the MOVEit Transfer vulnerability. FMFCU became aware of the CISA alert on June 1, 2023, and confirmed unauthorized data acquisition on June 19, 2023. Approximately 76 New Hampshire residents were affected. FMFCU patched the system, engaged forensic experts, notified law enforcement, and offered credit monitoring services.
- Maine State AGas victim2023-07-20
Franklin Mint Federal Credit Union reported a data breach affecting 140,963 individuals. The breach, which occurred on May 31, 2023, and was discovered on June 28, 2023, involved an external system hack. Compromised information includes names and Social Security numbers. The credit union began notifying affected individuals on July 20, 2023, and offered 12 months of identity protection services through Kroll.
- Massachusetts State AGas victim2023-07-20
Franklin Mint Federal Credit Union reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-07-20. 411 Massachusetts residents were affected. The report records the breach type as electronic.
- Indiana State AGas victim2023-07-20
Franklin Mint Federal Credit Union reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-31 and was reported on 2023-07-20. 238 Indiana residents were affected. 140,963 individuals affected in total.
- Delaware State AGas victim2023-07-20
Franklin Mint Federal Credit Union (FMFCU) disclosed a data security incident involving the MOVEit Transfer software vulnerability. FMFCU became aware of the CISA alert on June 1, 2023, and confirmed on June 19, 2023, that member data may have been acquired without authorization. Potentially affected data includes names, member numbers, partial credit card numbers, and personal loan information. FMFCU patched the system, quarantined it, reported to law enforcement, and offered 12 months of Experian IdentityWorks to affected members.
- Montana State AGas victim2023-07-20
Franklin Mint Federal Credit Union notified Montana residents of a data incident linked to the MOVEit Transfer vulnerability. The credit union discovered the alert on June 1, 2023, and confirmed unauthorized access to member data on June 19, 2023. Impacted data likely included PII, member numbers, and partial credit card numbers. FMFCU patched the system, engaged external experts, and offered 12 months of Experian IdentityWorks.
- Vermont State AGas victim2023-07-20
Franklin Mint Federal Credit Union (FMFCU) notified members that their personal information may have been acquired without authorization due to a critical vulnerability in Progress Software's MOVEit Transfer file transfer solution. FMFCU became aware of the CISA alert on June 1, 2023, and patched the system. An investigation concluded on June 19, 2023, that data was potentially compromised. Affected data may include names, addresses, member numbers, and partial credit card numbers. FMFCU is offering 12 months of Experian IdentityWorks.
- GLOBALLeak Siteas victim2023-07-15
fmfcu.org
- GLOBALLeak Siteas victim2023-07-10
Franklin Mint Federal Credit Union
- New Hampshire State AGas victim2022-11-14
Franklin Mint Federal Credit Union (FMFCU) notified the NH Attorney General of a third-party data incident involving its subsidiary, State Financial Network (SFN). An unauthorized individual accessed one employee email account between June 23 and July 8, 2022. The account contained personal information (name) of 2 New Hampshire residents. FMFCU/SFN notified the AG on Nov 8, 2022, and began notifying residents on Nov 4, 2022, offering 12 months of credit monitoring.