P2021-ND-329

Connect First Credit Union Ltd.

On August 6, 2021, a member of the credit union unintentionally logged into another member?s account. The Organization explained that ?The impacted member did not change [their] default password, which was originally the same as the username? The [other] member coincidentally used the same username and password when accessing [their] own online account.? The incident was discovered the same day when the member contacted the bank and reported that they were ?viewing the account profile of another individual.?

File Type: pdf
Categories: 2021
Tags: Unauthorized disclosure