Kitsap Credit Union

The Washington State Office of the Attorney General reported on December 1, 2020, that Kitsap Credit Union experienced a data breach due to unauthorized access to employee email accounts from May 19, 2020, to August 17, 2020, potentially affecting 3,268 Washington residents. Compromised information included names, Social Security numbers, financial account numbers, dates of birth, and medical information.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=10913

TPRM report: https://www.rankiteo.com/company/kitsap-credit-union

"id": "kit440072625",
"linkid": "kitsap-credit-union",
"type": "Breach",
"date": "5/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 3268,
                        'industry': 'Finance',
                        'location': 'Washington',
                        'name': 'Kitsap Credit Union',
                        'type': 'Financial Institution'}],
 'attack_vector': 'Email Compromise',
 'data_breach': {'number_of_records_exposed': 3268,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'Social Security numbers',
                                              'financial account numbers',
                                              'dates of birth',
                                              'medical information']},
 'date_detected': '2020-08-17',
 'date_publicly_disclosed': '2020-12-01',
 'description': 'Unauthorized access to employee email accounts potentially '
                'affecting 3,268 Washington residents.',
 'impact': {'data_compromised': ['names',
                                 'Social Security numbers',
                                 'financial account numbers',
                                 'dates of birth',
                                 'medical information']},
 'initial_access_broker': {'entry_point': 'Email Compromise'},
 'references': [{'date_accessed': '2020-12-01',
                 'source': 'Washington State Office of the Attorney General'}],
 'title': 'Kitsap Credit Union Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unauthorized Access'}