Indiana-based financial services provider Via Credit Union Marion said that the data security incident it suffered earlier this year compromised the sensitive personal information of more than 60,000 individuals.
Founded in 1936, Via Credit Union provides a range of banking and lending services to individuals and businesses including checking and savings accounts, auto and home loans, credit cards, and investment services.
In a data security incident notice filed with the Office of Maine Attorney General, Via CU said that it recently detected suspicious activity in its internal network. The organisation immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.
It also took steps to secure the affected systems and notified relevant law enforcement authorities and the Attorney General’s office about the incident.
“The forensic investigation determined that an unknown, unauthorised third party accessed our computer system between January 18, 2025, and January 20, 2025, and acquired certain files during that time,” ViaCU said.
The compromised data included names, addresses, dates of birth, Social Security numbers, Visa credit card numbers, and a form of financial account numbers. The credit union’s filing with the Maine state regulator also revealed that at least 60,853 individuals were impacted by the data security incident.
“We are taking further steps to reduce the risk of this type of incident occurring in the future, including enhancing our technical security measures,” ViaCU added.
While the financial service provider found no evidence of the compromise data being misused, it has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and the state attorney general.
It has also offered one year of complimentary identity protection and credit monitoring services through Experian IdentityWorks Credt 3B to all affected individuals.
At the time of publishing, no known hacker group has claimed responsibility for the cyber attack on ViaCU. The financial organisation has also not shared details on who is behind the attack or if it has paid a ransom.
