Washington State Employees Credit Union

The Washington State Office of the Attorney General reported a data breach involving the Washington State Employees Credit Union (WSECU) on December 1, 2023. The breach, occurring from October 28, 2023, to November 15, 2023, involved unauthorized access due to card skimmers placed on ATMs, affecting 1,216 individuals and potentially exposing names and financial information.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=16006

TPRM report: https://www.rankiteo.com/company/washington-state-employees-credit-union

"id": "was437080425",
"linkid": "washington-state-employees-credit-union",
"type": "Breach",
"date": "10/2023",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'customers_affected': 1216,
                        'industry': 'Financial Services',
                        'location': 'Washington State',
                        'name': 'Washington State Employees Credit Union '
                                '(WSECU)',
                        'type': 'Credit Union'}],
 'attack_vector': 'Card Skimmers',
 'data_breach': {'number_of_records_exposed': 1216,
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Financial Information']},
 'date_detected': '2023-11-15',
 'date_publicly_disclosed': '2023-12-01',
 'description': 'The Washington State Office of the Attorney General reported '
                'a data breach involving the Washington State Employees Credit '
                'Union (WSECU) on December 1, 2023. The breach, occurring from '
                'October 28, 2023, to November 15, 2023, involved unauthorized '
                'access due to card skimmers placed on ATMs, affecting 1,216 '
                'individuals and potentially exposing names and financial '
                'information.',
 'impact': {'data_compromised': ['Names', 'Financial Information'],
            'systems_affected': ['ATMs']},
 'initial_access_broker': {'entry_point': 'ATMs'},
 'motivation': 'Financial Gain',
 'post_incident_analysis': {'root_causes': 'Physical Security Vulnerability'},
 'references': [{'date_accessed': '2023-12-01',
                 'source': 'Washington State Office of the Attorney General'}],
 'title': 'Washington State Employees Credit Union Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Physical Security'}