Sharonview Federal Credit Union

The Vermont Office of the Attorney General reported a data breach involving Sharonview Federal Credit Union on December 4, 2023. The breach occurred between August 28 and August 29, 2023, when an unauthorized third party accessed an employee’s email account, potentially exposing names, financial account numbers, and social security numbers of affected individuals, though no misuse has been reported.

Source: https://ago.vermont.gov/document/2023-12-04-sharonview-federal-credit-union-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/sharonview-fcu

"id": "sha733072825",
"linkid": "sharonview-fcu",
"type": "Breach",
"date": "8/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Finance',
                        'name': 'Sharonview Federal Credit Union',
                        'type': 'Financial Institution'}],
 'attack_vector': 'Email Account Compromise',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Financial Account Numbers',
                                              'Social Security Numbers']},
 'date_detected': '2023-12-04',
 'date_publicly_disclosed': '2023-12-04',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'breach involving Sharonview Federal Credit Union on December '
                '4, 2023. The breach occurred between August 28 and August 29, '
                '2023, when an unauthorized third party accessed an employee’s '
                'email account, potentially exposing names, financial account '
                'numbers, and social security numbers of affected individuals, '
                'though no misuse has been reported.',
 'impact': {'data_compromised': ['Names',
                                 'Financial Account Numbers',
                                 'Social Security Numbers']},
 'initial_access_broker': {'entry_point': 'Email Account'},
 'references': [{'date_accessed': '2023-12-04',
                 'source': 'Vermont Office of the Attorney General'}],
 'threat_actor': 'Unauthorized Third Party',
 'title': 'Data Breach at Sharonview Federal Credit Union',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unauthorized Access to Email Account'}