Chevron Federal Credit Union
ent_8f6c6e58afa7f952
Disclosures
7
State AG · Leak Site · 6 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
90,536
as filed · State AG ME
Leak-site claims
2
unverified actor claims
Identity resolution
- Canonical name
- Chevron Federal Credit Union
- Normalized
- chevron federal credit union— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- chevronfcu.org
Disclosure history (7)newest first
- 🦞Maine State AGas victim2023-08-29
Chevron Federal Credit Union reported a data breach impacting 90,536 individuals due to a third-party vendor's compromise involving the MOVEit vulnerability. The incident occurred between May 30 and May 31, 2023, and was discovered on August 1, 2023. The compromised information includes names and Social Security numbers. The credit union offered 12 months of credit monitoring services through Experian.
- 🦫Oregon State AGas victim2023-08-24
Chevron Federal Credit Union ("CFCU") reported a data breach to the Oregon Attorney General. The breach was reported on 2023-08-24. The breach occurred during 5/30/2023 - 5/31/2023. The breach was discovered on 8/1/2023. 90,536 individuals were affected. Notice was sent on 8/24/2023.
- 🦬Montana State AGas victim2023-08-24
Chevron Federal Credit Union reported a data breach to the Montana Attorney General. The breach was reported on 2023-08-24. The breach occurred from 5/30/2023 to 5/31/2023. 107 Montana residents were affected.
- 🐻California State AGas victim2023-08-24
Chevron Federal Credit Union experienced a data breach involving the MOVEit file transfer service provided by Progress Software. An unauthorized party exploited a previously unknown vulnerability (zero-day) in the MOVEit application to decrypt and download files between May 30 and May 31, 2023. The incident was discovered on August 1, 2023, after new detection methods were published. Personal information, including basic identity data, was compromised. The organization engaged third-party forensics, remediated the vulnerability, and offered one year of credit monitoring to affected members.
- 🌲Washington State AGas victim2023-08-24
Chevron Federal Credit Union ("CFCU"), a finance sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2023-05-31 and filed notice on 2023-08-24. 947 Washington residents were affected. 85 days elapsed between awareness and notification. 1 days to identify the breach. 0 days to contain the breach.
- GLOBALLeak Siteas victim2023-07-26
Chevron Federal Credit Union
- GLOBALLeak Siteas victim2021-11-26
chevronfcu.org