Major Credit Union Data Breach Affects 172K Customers

A major cybersecurity incident at Connex Credit Union has compromised personal data belonging to 172,000 customers.

The Connecticut-based financial institution discovered unauthorized access to its systems on June 2, 2025, but didn’t notify affected customers until August 7.

What Happened During the Attack

Hackers gained access to Connex Credit Union’s external systems and downloaded sensitive member files.

The credit union officially discovered the breach on July 27, 2025, nearly two months after the initial intrusion occurred on June 3.

The delayed notification has raised concerns among cybersecurity experts. Roger Grimes from KnowBe4 questioned why the credit union waited over a month to inform victims, noting that this delay gives criminals additional time to exploit stolen information for targeted attacks.

Stolen Information Puts Customers at Risk

The compromised data includes highly sensitive personal and financial details:

• Full names and account numbers
• Debit card information
• Social Security numbers
• Government identification numbers

This combination of information creates significant risks for identity theft and financial fraud. Maine residents account for 467 of the affected individuals, according to the breach notification filed with state authorities.

Legal Investigation Launched

Law firm Schubert Jonckheer & Kolbe LLP has opened an investigation into the breach, examining whether the delayed notification violated state and federal laws. The firm specializes in class-action lawsuits against companies that fail to protect customer data adequately.

Affected members may be entitled to financial compensation and could require the credit union to improve its cybersecurity measures going forward.

Connex Credit Union has posted scam alerts warning members about potential fraud attempts. The institution reminds customers that legitimate representatives will never request PINs, passcodes, or account numbers over the phone.

TROYPOINT Tip: Never worry about identity theft again by using Aura which is TROYPOINT’s recommended identity theft protection!

Aura Identity Theft Protection Review

Final Thoughts

The Connex Credit Union data breach highlights ongoing cybersecurity challenges facing financial institutions.

With 172,000 members affected and a concerning delay in notification, this incident serves as a reminder for customers to monitor their accounts closely and consider additional identity protection services.

For more details on this story, refer to the law firm’s press release and the report from Hackread.

We want to know your thoughts. What do you think about this story? Let us know in the comment section below!

Be sure to stay up-to-date with the latest streaming news, reviews, tips, and more by following the TROYPOINT Advisor with updates weekly.