Credit union discovers 2023 breach two years later, exposing full financial data

Fairmont Federal Credit Union notified 187,000 customers that hackers stole their personal and financial information during a breach that occurred between September and October 2023 but wasn’t discovered until January 2024. The stolen data includes complete credit card details with security codes and PINs, Social Security numbers, IRS PINs, and full account credentials from the West Virginia-based institution. The credit union completed its forensic investigation in August 2025, nearly two years after the initial attack, though it reports no known cases of identity theft or fraud. The timing of the discovery coincided with the Black Basta ransomware group adding the credit union to its leak site, suggesting the prolific gang was responsible for the attack.

Read more:

https://www.securityweek.com/west-virginia-credit-union-notifying-187000-people-impacted-by-2023-data-breach/