CenLA Federal Credit Union

CenLA Federal Credit Union suffered a data breach on January 26, 2021, which remained undetected until April 30, 2021. Unauthorized actors gained access to the credit union’s computer network, exposing sensitive personal data. The incident impacted 18,313 individuals, with Social Security Numbers (SSNs) potentially compromised a high-value target for identity theft and financial fraud. The delayed discovery (over three months) heightened risks, as attackers may have exploited the stolen data during this period. SSNs are critical for financial and governmental authentication, making this breach particularly severe for affected individuals, who now face long-term risks of fraud, credit damage, and phishing attacks. The breach underscores vulnerabilities in the credit union’s cybersecurity defenses, including intrusion detection and response protocols. While the full extent of misuse remains unclear, the exposure of SSNs alone warrants urgent remediation, including credit monitoring, identity protection services, and regulatory scrutiny under data protection laws.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c55ef2f5-1b54-4894-939a-f2fb70481568.shtml

TPRM report: https://www.rankiteo.com/company/cenla-federal-credit-union

"id": "cen550091725",
"linkid": "cenla-federal-credit-union",
"type": "Breach",
"date": "1/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '18,313',
                        'industry': 'Financial Services',
                        'name': 'CenLA Federal Credit Union',
                        'type': 'Credit Union'}],
 'data_breach': {'number_of_records_exposed': '18,313',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security Numbers']},
 'date_detected': '2021-04-30',
 'description': 'The Maine Office of the Attorney General reported that CenLA '
                'Federal Credit Union experienced a data breach on January 26, '
                '2021, involving unauthorized access to their computer '
                'network, discovered on April 30, 2021. The breach affected a '
                'total of 18,313 individuals and potentially compromised '
                'Social Security Numbers.',
 'impact': {'data_compromised': ['Social Security Numbers'],
            'identity_theft_risk': 'Potential',
            'systems_affected': ['Computer Network']},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'title': 'CenLA Federal Credit Union Data Breach',
 'type': 'Data Breach'}