Nebraska-based financial organisation Liberty First Credit Union said that the data security incident it suffered in September compromised the sensitive personal information of more than 50,000 individuals.
In a notice of data security incident filed with the Office of Maine Attorney General, Liberty First Credit Union said that on September 17, it discovered unauthorised access to its internal network.
The credit union immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.
“The forensic investigation determined that the unauthorised third party may have accessed and acquired certain files from our systems during this period. This unauthorised access was limited to a portion of our internal network and did not involve unauthorized access to our banking, online banking, or payment systems,” reads the notice.
The compromised data included names and other personal identifiers. LFCU’S filing with the Maine state regulator also revealed that at least 52,496 individuals were impacted by the incident.
“We have taken steps to reduce the risk of this type of incident from occurring in the future, including enhancing our technical security measures. We notified federal law enforcement and continue to work with them during their investigation,” LFCU added.
While the credit union found no evidence of the compromise data being misused, it has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and state attorney general.
LFCU has also offered one year of complimentary identity protection and credit monitoring services through Experian Credit 3B to all affected individuals.
The RansomHub ransomware group claimed responsibility for the cyber attack on LFCU and listed it as a victim on its data leak site. The group claimed to be in possession of 254 GB of data stolen from the credit union that includes client databases, passport details and financial data.
