First Financial Credit Union

The New Mexico Office of the Attorney General disclosed a data breach affecting First Financial Credit Union (FFCU) between January 17, 2022, and February 6, 2022. The incident exposed sensitive personal information of an unspecified number of members, including names, addresses, Social Security numbers, and financial account details. The breach poses significant risks, as compromised data could enable identity theft, financial fraud, or targeted phishing attacks against affected individuals. While the exact number of impacted members remains undisclosed, the exposure of Social Security numbers and financial records elevates the severity, given their use in fraudulent activities. The breach was reported on April 6, 2022, but the delay between discovery and notification may have prolonged vulnerability for affected parties. As a financial institution, FFCU’s breach underscores systemic vulnerabilities in safeguarding customer data, potentially eroding trust and triggering regulatory scrutiny. The lack of clarity on containment measures or mitigation efforts further compounds concerns about long-term repercussions for both the credit union and its members.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c4b3dad1-d54e-4c98-ae3f-b1e0bd1744d4.shtml

TPRM report: https://www.rankiteo.com/company/first-financial-federal-credit-union

"id": "fir027091825",
"linkid": "first-financial-federal-credit-union",
"type": "Breach",
"date": "1/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Unspecified number of members',
                        'industry': 'Financial Services',
                        'location': 'New Mexico, USA',
                        'name': 'First Financial Credit Union (FFCU)',
                        'type': 'Credit Union'}],
 'data_breach': {'data_exfiltration': 'Likely (data accessed by unauthorized '
                                      'parties)',
                 'personally_identifiable_information': ['names',
                                                         'addresses',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High (includes SSNs and financial '
                                        'account information)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Financial Data']},
 'date_publicly_disclosed': '2022-04-06',
 'description': 'The New Mexico Office of the Attorney General reported a data '
                'breach involving First Financial Credit Union (FFCU) on April '
                '6, 2022. The breach occurred between January 17, 2022, and '
                'February 6, 2022, potentially affecting personal information '
                'such as names, addresses, Social Security numbers, and '
                'financial account information of an unspecified number of '
                'members.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'Social Security numbers',
                                 'financial account information'],
            'identity_theft_risk': 'Potential (due to exposed PII)',
            'payment_information_risk': 'Potential (financial account '
                                        'information exposed)'},
 'references': [{'source': 'New Mexico Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Reported to New Mexico '
                                                       'Office of the Attorney '
                                                       'General'},
 'response': {'communication_strategy': 'Public disclosure via New Mexico '
                                        'Office of the Attorney General'},
 'title': 'First Financial Credit Union (FFCU) Data Breach',
 'type': 'Data Breach'}