On February 24, 2025, the Maine Office of the Attorney General disclosed a data breach at Via Credit Union, which transpired between January 18 and January 20, 2025, due to an external hacking incident. The breach compromised the personal information of 60,853 individuals, including at least four confirmed Maine residents. The exposed data included highly sensitive details such as names, addresses, and Social Security numbers, significantly elevating the risk of identity theft and financial fraud. In response, the credit union offered 12 months of free identity theft protection services through Experian IdentityWorks Credit 3B to affected individuals. The incident underscores the severe implications of cyber intrusions targeting financial institutions, where the exposure of personally identifiable information (PII) can lead to long-term reputational damage, regulatory scrutiny, and financial losses for both the organization and its customers.
TPRM report: https://www.rankiteo.com/company/viacreditunion
"id": "via1046092625",
"linkid": "viacreditunion",
"type": "Breach",
"date": "1/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 60853,
'industry': 'Banking/Credit Union',
'name': 'Via Credit Union',
'type': 'Financial Institution'},
{'industry': 'Legal/Regulatory',
'location': 'Maine, USA',
'name': 'Maine Office of the Attorney General',
'type': 'Government Agency'}],
'attack_vector': 'External Hacking',
'customer_advisories': '12-month identity theft protection via Experian '
'IdentityWorks Credit 3B offered to affected '
'individuals',
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': 60853,
'personally_identifiable_information': ['Names',
'Addresses',
'Social Security '
'Numbers'],
'sensitivity_of_data': 'High (includes SSNs)',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)']},
'date_detected': '2025-01-20',
'date_publicly_disclosed': '2025-02-24',
'description': 'On February 24, 2025, the Maine Office of the Attorney '
'General reported a data breach involving Via Credit Union '
'that occurred between January 18 and January 20, 2025, due to '
'external hacking. Approximately 60,853 individuals were '
'affected, with 4 residents specifically mentioned, and the '
'compromised information included personal details such as '
'names, addresses, and Social Security numbers. Identity theft '
'protection services via Experian IdentityWorks Credit 3B were '
'offered for 12 months.',
'impact': {'brand_reputation_impact': 'Potential reputational harm due to '
'exposure of sensitive personal data',
'data_compromised': ['Names',
'Addresses',
'Social Security Numbers'],
'identity_theft_risk': 'High (SSNs compromised)'},
'references': [{'date_accessed': '2025-02-24',
'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
'Attorney General']},
'response': {'communication_strategy': 'Public disclosure via Maine Attorney '
'General; identity theft protection '
'offered to affected individuals',
'third_party_assistance': ['Experian IdentityWorks Credit 3B '
'(12-month identity theft '
'protection)']},
'title': 'Via Credit Union Data Breach (2025)',
'type': 'Data Breach'}