The National Credit Union Administration approved a final rule that requires a federally insured credit union to report reportable cyber incidents to the NCUA as soon as possible, and in no event later than 72 hours. The new rule becomes effective on September 1, 2023.