🦞Maine State AG
Clustered 3 filings across 3 jurisdictions · filing window Oct 9, 2023 → Oct 10, 2023. View entity profile → Other incidents for this victim →
incident inc_311b733e4237452e · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
Financial account · Credentials
CA ME VT
all State AG
Earliest sighting first · deep chronology in Litigation Timeline
May 7, 2023 → May 27, 2023
When the intrusion reportedly occurred, per the linked filings
Sep 15, 2023
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Reported by MAINE AG, CALIFORNIA AG, VERMONT AG filings
University Federal Credit Union reported a data breach affecting 29 Maine residents. The breach, which occurred between May 7 and May 27, 2023, was discovered on September 15, 2023. The incident was a result of the MOVEit Transfer vulnerability, an external system breach. The compromised information includes names in combination with financial account or credit/debit card numbers and their associated security codes or PINs. Affected individuals were notified on October 10, 2023, and offered 12 months of credit monitoring and identity theft protection services through Experian.
Affected (this filing): 29
University Federal Credit Union notified members that their personal information, potentially including Social Security numbers, was accessed via a global data security event affecting the MOVEit file transfer software vendor. The breach occurred between May 27 and May 31, 2023, and was discovered on September 15, 2023. Files were copied and removed from the MOVEit platform by an unauthorized party. UFCU engaged third-party professionals and is offering 12 months of complimentary identity monitoring through Experian.
University Federal Credit Union (UFCU) notified consumers on October 10, 2023, of a data breach involving its vendor, Progress Software's MOVEit transfer platform. The incident, discovered on September 15, 2023, involved unauthorized access to files containing member personal information (including SSNs) copied from the MOVEit platform. No evidence of financial fraud was found. UFCU engaged third-party investigators and offered 12 months of credit monitoring. The breach affects members across multiple US states.