Franklin Mint Federal Credit Union

Franklin Mint Federal Credit Union (FMFCU) disclosed a data security incident involving the MOVEit Transfer software vulnerability. FMFCU became aware of the CISA alert on June 1, 2023, and confirmed on June 19, 2023, that member data may have been acquired without authorization. Potentially affected data includes names, member numbers, partial credit card numbers, and personal loan information. FMFCU patched the system, quarantined it, reported to law enforcement, and offered 12 months of Experian IdentityWorks to affected members.

Franklin Mint Federal Credit Union (FMFCU) notified the NH AG of a data security incident involving the MOVEit Transfer vulnerability. FMFCU became aware of the CISA alert on June 1, 2023, and confirmed unauthorized data acquisition on June 19, 2023. Approximately 76 New Hampshire residents were affected. FMFCU patched the system, engaged forensic experts, notified law enforcement, and offered credit monitoring services.

Affected (this filing): 76