World Council of Credit Unions

The Maine Office of the Attorney General reported a data breach involving the World Council of Credit Unions (WOCCU) on May 10, 2021. The breach occurred on October 30, 2020, due to a phishing email incident affecting five employee email accounts, potentially exposing the Social Security number of one Maine resident. Identity theft protection services were offered for 12 months.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5c5a5b85-7849-4ff3-b506-031340bd149d.shtml

TPRM report: https://www.rankiteo.com/company/world-council-of-credit-unions

"id": "wor314072625",
"linkid": "world-council-of-credit-unions",
"type": "Breach",
"date": "10/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 1,
                        'industry': 'Financial Services',
                        'name': 'World Council of Credit Unions (WOCCU)',
                        'type': 'Organization'}],
 'attack_vector': 'Phishing',
 'data_breach': {'number_of_records_exposed': 1,
                 'personally_identifiable_information': 'Social Security '
                                                        'number',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security number']},
 'date_detected': '2020-10-30',
 'date_publicly_disclosed': '2021-05-10',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving the World Council of Credit Unions (WOCCU) '
                'on May 10, 2021. The breach occurred on October 30, 2020, due '
                'to a phishing email incident affecting five employee email '
                'accounts, potentially exposing the Social Security number of '
                'one Maine resident. Identity theft protection services were '
                'offered for 12 months.',
 'impact': {'data_compromised': ['Social Security number'],
            'identity_theft_risk': 'High'},
 'initial_access_broker': {'entry_point': 'Phishing email'},
 'post_incident_analysis': {'root_causes': 'Phishing email incident'},
 'references': [{'date_accessed': '2021-05-10',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'remediation_measures': ['Identity theft protection services '
                                       'offered for 12 months']},
 'title': 'Data Breach at World Council of Credit Unions',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Human Error'}