Community Powered Federal Credit Union

The Maine Office of the Attorney General disclosed that Community Powered Federal Credit Union (CPFCU) suffered a data breach due to unauthorized access to an employee’s email account between June 23, 2022, and July 8, 2022. The incident exposed sensitive personal information of 7,537 individuals, including names and financial account numbers, raising concerns over potential identity theft and financial fraud. While the breach did not involve ransomware or a large-scale system compromise, the exposure of financial data poses significant risks to affected customers. In response, CPFCU offered a one-year complimentary membership to Experian IdentityWorks Credit 3B to help mitigate potential harm. The breach highlights vulnerabilities in email security protocols and the broader implications of third-party access to sensitive customer data within financial institutions.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/06ac5657-313e-487f-b24e-4a687c7edbab.shtml

TPRM report: https://www.rankiteo.com/company/community-powered-federal-credit-union

"id": "com717082025",
"linkid": "community-powered-federal-credit-union",
"type": "Breach",
"date": "6/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '7,537',
                        'industry': 'Financial Services',
                        'location': 'Maine, USA',
                        'name': 'Community Powered Federal Credit Union '
                                '(CPFCU)',
                        'type': 'Credit Union'}],
 'attack_vector': 'Unauthorized Access (Email Account Compromise)',
 'customer_advisories': ['Complimentary one-year membership to Experian '
                         'IdentityWorks Credit 3B offered to affected '
                         'individuals'],
 'data_breach': {'number_of_records_exposed': '7,537',
                 'personally_identifiable_information': ['Names',
                                                         'Financial Account '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information',
                                              'Financial Data']},
 'description': 'The Maine Office of the Attorney General reported that '
                'Community Powered Federal Credit Union (CPFCU) experienced a '
                "data breach involving unauthorized access to an employee's "
                'email account from June 23, 2022, to July 8, 2022. The breach '
                'affected 7,537 individuals, potentially compromising their '
                'personal information, including names and financial account '
                'numbers. CPFCU offered a complimentary one-year membership to '
                'Experian IdentityWorks Credit 3B as a response to the '
                'incident.',
 'impact': {'data_compromised': ['Names', 'Financial Account Numbers'],
            'identity_theft_risk': 'High (Personal and Financial Data Exposed)',
            'payment_information_risk': 'High (Financial Account Numbers '
                                        'Compromised)',
            'systems_affected': ['Employee Email Account']},
 'initial_access_broker': {'entry_point': 'Employee Email Account'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'communication_strategy': ['Offered complimentary one-year '
                                         'membership to Experian IdentityWorks '
                                         'Credit 3B to affected individuals'],
              'third_party_assistance': ['Experian IdentityWorks Credit 3B '
                                         '(Identity Protection Service)']},
 'title': 'Community Powered Federal Credit Union (CPFCU) Email Account Data '
          'Breach',
 'type': 'Data Breach'}