KH Credit Union Data Breach Exposes Sensitive Member Information
A data breach at KH Credit Union, a Dayton, Ohio-based financial institution, has exposed sensitive personal and financial information of its members. The incident stemmed from unauthorized access to systems managed by Kettering Health, which handles certain operations for the credit union.
The breach was detected on May 20, 2025, after suspicious activity was identified on Kettering Health’s network. An investigation revealed that unauthorized access occurred between April 9 and May 20, 2025, during which files containing member data may have been viewed or exfiltrated. The breach was confined to Kettering Health’s systems and did not directly involve KH Credit Union’s own network.
Exposed data includes:
- Full names
- Bank and financial account numbers
- Medical billing and claims information
- Patient account numbers
- Social Security numbers
- Driver’s license and state ID numbers
KH Credit Union, founded in 1964, serves members with a range of financial services, emphasizing privacy and security. The breach has prompted legal action, with Shamis & Gentile P.A., a class action law firm, investigating potential compensation for affected individuals.
No further details on the scope of impacted members or the attackers’ identity have been disclosed. The incident underscores the risks of third-party system vulnerabilities in financial data security.
Source: https://www.claimdepot.com/investigations/kh-credit-union-data-breach-2026
Kettering Health cybersecurity rating report: https://www.rankiteo.com/company/ketteringhealth
"id": "KET1782239933",
"linkid": "ketteringhealth",
"type": "Breach",
"date": "4/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Banking/Financial Services',
'location': 'Dayton, Ohio, USA',
'name': 'KH Credit Union',
'type': 'Financial Institution'}],
'attack_vector': 'Unauthorized Access',
'data_breach': {'data_exfiltration': 'Possible',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Full names',
'Bank and financial account '
'numbers',
'Medical billing and claims '
'information',
'Patient account numbers',
'Social Security numbers',
'Driver’s license and state ID '
'numbers']},
'date_detected': '2025-05-20',
'description': 'A data breach at KH Credit Union, a Dayton, Ohio-based '
'financial institution, has exposed sensitive personal and '
'financial information of its members. The incident stemmed '
'from unauthorized access to systems managed by Kettering '
'Health, which handles certain operations for the credit '
'union. The breach was detected on May 20, 2025, after '
'suspicious activity was identified on Kettering Health’s '
'network. An investigation revealed that unauthorized access '
'occurred between April 9 and May 20, 2025, during which files '
'containing member data may have been viewed or exfiltrated. '
'The breach was confined to Kettering Health’s systems and did '
'not directly involve KH Credit Union’s own network.',
'impact': {'data_compromised': 'Sensitive personal and financial information',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential class action lawsuit',
'payment_information_risk': 'High',
'systems_affected': 'Kettering Health’s systems'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Cyber Incident Description'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit '
'investigation'},
'title': 'KH Credit Union Data Breach Exposes Sensitive Member Information',
'type': 'Data Breach'}