Frontwave Credit Union Reports Data Breach Affecting Member SSNs After Vendor Error
Oceanside, Calif. Frontwave Credit Union, a $1.7 billion financial institution, disclosed a data breach involving member names and Social Security numbers after a service provider accidentally shared sensitive information with another credit union. The incident was reported to the California Attorney General’s Office on April 28, 2026, with the breach occurring on April 3, 2026.
According to Frontwave’s notification, the credit union was alerted by the vendor on April 3 that non-public member data had been exposed. The recipient credit union, which was not named, confirmed deletion of the information. Frontwave stated there is no evidence of misuse but acknowledged the exposure of personally identifiable data.
As a remedial measure, affected members are being offered 12 months of complimentary Experian IdentityWorks protection, including credit monitoring, identity restoration support, and up to $1 million in identity theft insurance. The breach appears to have been contained, with no indication of broader impact.
Source: https://www.cutoday.info/Fresh-Today/Frontwave-CU-Discloses-Data-Breach-Involving-Member-SSNs
Frontwave Credit Union cybersecurity rating report: https://www.rankiteo.com/company/frontwave-credit-union
"id": "FRO1777566496",
"linkid": "frontwave-credit-union",
"type": "Breach",
"date": "4/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Members (number not specified)',
'industry': 'Credit Union',
'location': 'Oceanside, California, USA',
'name': 'Frontwave Credit Union',
'size': '$1.7 billion in assets',
'type': 'Financial Institution'}],
'attack_vector': 'Vendor Error',
'customer_advisories': 'Affected members offered 12 months of complimentary '
'Experian IdentityWorks protection',
'data_breach': {'personally_identifiable_information': 'Names, Social '
'Security numbers',
'sensitivity_of_data': 'High (Social Security numbers and '
'member names)',
'type_of_data_compromised': 'Personally Identifiable '
'Information (PII)'},
'date_detected': '2026-04-03',
'date_publicly_disclosed': '2026-04-28',
'description': 'Frontwave Credit Union disclosed a data breach involving '
'member names and Social Security numbers after a service '
'provider accidentally shared sensitive information with '
'another credit union. The breach was reported to the '
'California Attorney General’s Office on April 28, 2026, with '
'the incident occurring on April 3, 2026.',
'impact': {'data_compromised': 'Member names and Social Security numbers',
'identity_theft_risk': 'High'},
'investigation_status': 'Contained, no evidence of misuse',
'post_incident_analysis': {'root_causes': 'Vendor error leading to accidental '
'sharing of sensitive information'},
'references': [{'source': 'Frontwave Credit Union Notification'}],
'regulatory_compliance': {'regulatory_notifications': 'Reported to the '
'California Attorney '
'General’s Office'},
'response': {'containment_measures': 'Recipient credit union confirmed '
'deletion of the information',
'remediation_measures': 'Offered 12 months of complimentary '
'Experian IdentityWorks protection, '
'including credit monitoring, identity '
'restoration support, and up to $1 '
'million in identity theft insurance'},
'title': 'Frontwave Credit Union Data Breach Affecting Member SSNs After '
'Vendor Error',
'type': 'Data Breach'}