Connex Credit Union

A cyber-attack compromised the personal and financial data of 172,000 individuals at Connex Credit Union. The intrusion occurred between June 2 and 3, 2025, with attackers potentially accessing or downloading sensitive files, including names, account numbers, debit card details, Social Security numbers, and government-issued IDs. While no unauthorized access to accounts or funds has been confirmed, the exposure of such data raises significant risks of identity theft and fraud. Connex is offering free credit monitoring and collaborating with law enforcement to investigate the breach and enhance security measures.

Source: https://www.infosecurity-magazine.com/news/connex-credit-union-breach/

TPRM report: https://www.rankiteo.com/company/connex-credit-union

"id": "con220081225",
"linkid": "connex-credit-union",
"type": "Cyber Attack",
"date": "8/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': '172,000 individuals',
                        'industry': 'Financial Services',
                        'location': 'Connecticut, USA',
                        'name': 'Connex Credit Union',
                        'size': 'Over $1bn in assets, 70,000 members',
                        'type': 'Credit Union'}],
 'customer_advisories': '12 months of free credit monitoring and identity '
                        'protection',
 'data_breach': {'data_exfiltration': 'Possible',
                 'number_of_records_exposed': '172,000',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal data',
                                              'Financial data']},
 'date_detected': '2025-06-03',
 'description': 'A cyber-attack compromised the personal and financial data of '
                '172,000 individuals at Connex Credit Union.',
 'impact': {'brand_reputation_impact': 'Potential risk due to exposure of '
                                       'sensitive data',
            'data_compromised': ['Names',
                                 'Account numbers',
                                 'Debit card details',
                                 'Social Security numbers',
                                 'Government-issued IDs'],
            'identity_theft_risk': 'High',
            'payment_information_risk': 'High'},
 'investigation_status': 'Ongoing',
 'references': [{'source': 'Data Breaches Affecting the Financial Sector'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Attorney '
                                                       'General’s Office'},
 'response': {'communication_strategy': 'Letters to affected individuals, '
                                        'public warning about scams',
              'enhanced_monitoring': True,
              'incident_response_plan_activated': True,
              'law_enforcement_notified': True,
              'remediation_measures': 'Enhanced security measures',
              'third_party_assistance': 'Cybersecurity experts'},
 'stakeholder_advisories': 'Warning about scam calls and text messages',
 'title': 'Data Breach at Connex Credit Union',
 'type': 'Data Breach'}