MetroWest Community Federal Credit Union, Lynch Carpenter and LLP: MetroWest Community Federal Credit Union Data Breach Claims Investigated by Lynch Carpenter

MetroWest Community Federal Credit Union Suffers Data Breach Affecting 20,000 Individuals

On March 13, 2026, MetroWest Community Federal Credit Union, a Massachusetts-based credit union, disclosed a cybersecurity incident that compromised the personal data of over 20,000 individuals. An unauthorized actor gained access to MetroWest’s network, potentially exfiltrating sensitive personally identifiable information (PII), including names paired with:

• Addresses
• Financial account numbers
• Payment card numbers
• Dates of birth
• Social Security numbers
• Driver’s license numbers
• Taxpayer identification numbers

The breach is under investigation by Lynch Carpenter, LLP, a national class action law firm, which is reviewing potential legal claims on behalf of affected individuals. MetroWest has not yet provided further details on the attack vector or the timeline of the intrusion. The incident highlights ongoing risks to financial institutions and the exposure of highly sensitive consumer data.

Source: https://www.globenewswire.com/news-release/2026/03/13/3255606/0/en/MetroWest-Community-Federal-Credit-Union-Data-Breach-Claims-Investigated-by-Lynch-Carpenter.html

Lynch Carpenter LLP cybersecurity rating report: https://www.rankiteo.com/company/lynch-carpenter-llp

MetroWest Community FCU cybersecurity rating report: https://www.rankiteo.com/company/metrowest-community-federal-credit-union

"id": "LYNMET1773412918",
"linkid": "lynch-carpenter-llp, metrowest-community-federal-credit-union",
"type": "Breach",
"date": "3/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '20000',
                        'industry': 'Financial Services',
                        'location': 'Massachusetts, USA',
                        'name': 'MetroWest Community Federal Credit Union',
                        'type': 'Credit Union'}],
 'data_breach': {'data_exfiltration': 'Potential',
                 'number_of_records_exposed': '20000',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Addresses',
                                              'Financial account numbers',
                                              'Payment card numbers',
                                              'Dates of birth',
                                              'Social Security numbers',
                                              'Driver’s license numbers',
                                              'Taxpayer identification '
                                              'numbers']},
 'date_publicly_disclosed': '2026-03-13',
 'description': 'MetroWest Community Federal Credit Union, a '
                'Massachusetts-based credit union, disclosed a cybersecurity '
                'incident that compromised the personal data of over 20,000 '
                'individuals. An unauthorized actor gained access to '
                'MetroWest’s network, potentially exfiltrating sensitive '
                'personally identifiable information (PII).',
 'impact': {'data_compromised': 'Personally identifiable information (PII)',
            'identity_theft_risk': 'High',
            'legal_liabilities': 'Potential legal claims under review',
            'payment_information_risk': 'High'},
 'investigation_status': 'Ongoing',
 'references': [{'source': 'Cyber Incident Description'}],
 'regulatory_compliance': {'legal_actions': 'Potential class action lawsuit '
                                            'under review'},
 'response': {'third_party_assistance': 'Lynch Carpenter, LLP'},
 'threat_actor': 'Unauthorized actor',
 'title': 'MetroWest Community Federal Credit Union Data Breach',
 'type': 'Data Breach'}