data breach phishing
The $570 million Co-op Credit Union informed members recently of a data breach involving personal information, including Social Security numbers and credit and debit card numbers.
“Per our letter, we are notifying any members that may have been impacted by the email compromise,” Co-op Credit Union President/CEO Tim Tranberg said. “We do not have evidence that anyone’s information has been used to commit identity theft or for any other malicious purpose.”
On Oct. 21, the credit union’s member sample notification letter was filed with the Massachusetts Office of Consumer Affairs and Business Regulation.
Co-op Credit Union (CCU) serves more than 23,560 members.
In its sample letter, the credit union said it recently discovered that an unauthorized party temporarily gained access to one of its employee’s email accounts and promptly launched an investigation.
“Based on the finding of our investigation, we reviewed the items in the email account that were potentially involved in the incident,” the sample letter stated. “On July 23, 2025, we determined that they contained you name, as well as your ...”
Although the sample letter does not include that additional information, the Massachusetts Officer of Consumer Affairs shows members’ Social Security numbers and their credit and debit card numbers were compromised. Members’ driver’s licenses and their bank account information were not compromised.
“Through the investigation, we learned that the unauthorized party had access to the involved email account between April 8, 2025 and April 18, 2025, and may have acquired items in the email account during that time,” the sample letter stated. It did not identify the “acquired items.”
“We take this incident very seriously, and protecting personal information is one of our top priorities,” Tranberg said. “We are taking steps to reduce the risk of this type of incident occurring in the future, including steps related to our technical security measures.”
He would not say how many members may have been affected by the breach.
CCU is offering members complimentary credit monitoring services for two years.
Peter Strozniak can be reached at pstrozniak@cutimes.com.
© Arc, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to TMSalesOperations@arc-network.com. For more information visit Asset & Logo Licensing.