The Maine Office of the Attorney General reported that Bank-Fund Staff Federal Credit Union (BFSFCU) experienced unauthorized access to an employee email account between February 16, 2021, and March 4, 2021. This breach potentially affected personal information of 3,885 individuals, including names, social security numbers, and mortgage loan account numbers. The breach was discovered on April 30, 2021, and BFSFCU offered identity theft protection services through Experian IdentityWorks for 24 months.
TPRM report: https://www.rankiteo.com/company/bank-fund-staff-federal-credit-union
"id": "ban049072625",
"linkid": "bank-fund-staff-federal-credit-union",
"type": "Breach",
"date": "2/2021",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 3885,
'industry': 'Finance',
'name': 'Bank-Fund Staff Federal Credit Union',
'type': 'Financial Institution'}],
'attack_vector': 'Email Account Compromise',
'data_breach': {'number_of_records_exposed': 3885,
'personally_identifiable_information': ['names',
'social security '
'numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information']},
'date_detected': '2021-04-30',
'description': 'Unauthorized access to an employee email account at Bank-Fund '
'Staff Federal Credit Union (BFSFCU) potentially affected '
'personal information of 3,885 individuals.',
'impact': {'data_compromised': ['names',
'social security numbers',
'mortgage loan account numbers'],
'identity_theft_risk': 'High'},
'initial_access_broker': {'entry_point': 'Email Account'},
'references': [{'source': 'Maine Office of the Attorney General'}],
'response': {'third_party_assistance': ['Experian IdentityWorks']},
'title': 'Bank-Fund Staff Federal Credit Union Email Breach',
'type': 'Data Breach'}