The Maine Office of the Attorney General disclosed a data breach at Edge Federal Credit Union (EFCU) in December 2022, stemming from unauthorized access to an employee’s email account between August 8 and August 15, 2022. The incident compromised the personal and financial information of two Maine residents, including names, addresses, dates of birth, and financial account details. The breach was attributed to a phishing or credential-compromise attack, allowing threat actors to infiltrate the email system without immediate detection. While the scale of affected individuals appears limited (only two confirmed victims), the nature of the exposed data particularly financial account information poses significant risks, including identity theft, fraud, and financial loss for the impacted customers. The breach also raises concerns about internal security protocols, as the unauthorized access persisted for a week before mitigation. EFCU likely faced regulatory scrutiny under state and federal data protection laws (e.g., GLBA, Maine’s data breach notification statute), requiring mandatory disclosures and potential remediation measures for affected parties. The incident underscores vulnerabilities in email security and access controls, common vectors for cybercriminals targeting financial institutions.
TPRM report: https://www.rankiteo.com/company/cutting-edge-credit-union
"id": "cut410082025",
"linkid": "cutting-edge-credit-union",
"type": "Breach",
"date": "8/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '2',
'industry': 'Financial Services',
'location': 'Maine, USA',
'name': 'Edge Federal Credit Union (EFCU)',
'type': 'Credit Union'}],
'attack_vector': 'Unauthorized Access (Email Account Compromise)',
'data_breach': {'number_of_records_exposed': '2',
'personally_identifiable_information': ['Names',
'Addresses',
'Dates of Birth'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Financial Account Information']},
'date_publicly_disclosed': '2022-12-20',
'description': 'The Maine Office of the Attorney General reported a data '
'breach involving Edge Federal Credit Union (EFCU) on December '
'20, 2022. The breach occurred between August 8, 2022, and '
'August 15, 2022, due to unauthorized access to an EFCU email '
'account, affecting the personal information of 2 Maine '
'residents, including names, addresses, dates of birth, and '
'financial account information.',
'impact': {'data_compromised': ['Names',
'Addresses',
'Dates of Birth',
'Financial Account Information'],
'identity_theft_risk': 'High (PII and financial data exposed)',
'payment_information_risk': 'High (Financial account information '
'exposed)',
'systems_affected': ['Email Account']},
'initial_access_broker': {'entry_point': 'Email Account'},
'references': [{'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
'Attorney General']},
'response': {'communication_strategy': 'Public disclosure via Maine Office of '
'the Attorney General'},
'title': 'Data Breach at Edge Federal Credit Union (EFCU)',
'type': 'Data Breach'}