Incident Score: Analysis & Impact (IND1764878606)

In this Rankiteo incident briefing, we review the Industrial Credit Union breach identified under incident ID IND1764878606.

The analysis begins with a detailed overview of Industrial Credit Union's information like the linkedin page: https://www.linkedin.com/company/industrial-credit-union, the number of followers: 567, the industry type: Banking and the number of employees: 77 employees

After the initial compromise, the video explains how Rankiteo's incident engine converts technical details into a normalized incident score. The incident score before the incident was 754 and after the incident was 665 with a difference of -89 which is could be a good indicator of the severity and impact of the incident.

In the next step of the video, we will analyze in more details the incident and the impact it had on Industrial Credit Union and their customers.

On 26 November 2025, Industrial Credit Union of Whatcom County disclosed Data Breach issues under the banner "Industrial Credit Union of Whatcom County Third-Party Data Breach".

Industrial Credit Union of Whatcom County experienced a significant cybersecurity event involving a third-party partner, Marquis Software Solutions ('Go Marquis'), resulting in the compromise of personally identifiable information (PII) of at least 24,526 Washington residents.

The disruption is felt across the environment, affecting Marquis Software Solutions systems, and exposing Personally identifiable information (PII), with nearly 24,526 records at risk.

In response, teams activated the incident response plan, moved swiftly to contain the threat with measures like Terminated relationship with affected partner, and stakeholders are being briefed through Notification to affected individuals, regulatory agencies.

The case underscores how Ongoing, and recommending next steps like Offering free one-year subscription to credit monitoring services for affected individuals, with advisories going out to stakeholders covering Notification to affected individuals about the breach and credit monitoring services.

Finally, we try to match the incident with the MITRE ATT&CK framework to see if there is any correlation between the incident and the MITRE ATT&CK framework.

The MITRE ATT&CK framework is a knowledge base of techniques and sub-techniques that are used to describe the tactics and procedures of cyber adversaries. It is a powerful tool for understanding the threat landscape and for developing effective defense strategies.