First Commonwealth Federal Credit Union data breach impacted nearly 100,000 customers

Lehigh Valley, Pennsylvania-based First Commonwealth Federal Credit Union said that the data security incident it suffered earlier this year compromised the sensitive personal information of close to 100,000 individuals.

 

In a notice of data breach filed with the Office of Maine Attorney general and on its website, First Commonwealth said that on June 27, it identified suspicious activities in its internal network. The credit union immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

“As a result of the investigation, we learned that an unauthorised actor acquired certain files and data stored within our systems on or around June 26, 2024,” First Commonwealth said.

 

“Upon learning this, we launched a comprehensive review of all potentially affected information to identify any personal information that could have possibly been acquired. That review remains ongoing at this time, but on July 1, 2024, we confirmed that a file likely containing your personal information may have been involved in the incident,” it added.

 

The compromised data included customer’s names, addresses, Social Security numbers, dates of birth, and account numbers. The credit union’s filing with the Maine state regulator also revealed that at least 98,809 individuals were impacted by the data security incident.

 

“As part of our ongoing commitment to the privacy of information in our care, we further strengthened our existing security policies and procedures as well as bolstered security to further protect against similar incidents in the future,” First Commonwealth added.

 

While the financial institution found no evidence of the compromised information being misused, it advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and state attorney general.

 

It has also offered one year of complimentary identity protection and credit monitoring services through IDX to all affected individuals.