ROCKVILLE, Md.— In the wake of a data breach that occurred in February of this year, three separate lawsuits seking class action status have been filed against Lafayette FCU.

Plaintiffs Sebhia Dibra, Carl Lewis and Joseph Mausteller each filed lawsuits and are alleging the $2.0-billion credit union failed to properly secure and safeguard sensitive personally identifiable (PII) information of more than 75,000 members, according to TopClassActions.com.

The suits were all filed in Maryland federal court.

Plaintiffs Sebhia Dibra, Carl Lewis and Joseph Mausteller each filed lawsuits seeking class action status against Lafayette Federal Credit Union between March 27 and March 31 in Maryland federal court, alleging negligence and breach of contract.

What Suits Allege

According to the suits, in February 2025 hackers targeted and accessed Lafayette FCU’s network and were able to obtain full names in combination with Social Security numbers, financial account numbers, loan account numbers and other sensitive data.

“Plaintiffs are current and former members of Lafayette who, in order to obtain services from Lafayette, were required to entrust Lafayette with their sensitive, non-public PII,” the lawsuits, allege, TopClassActions.com reported. “Financial institutions owe a duty to protect PII, Lafayette data breach class action alleges businesses like Lafayette that handle PII owe a duty to adopt reasonable measures to protect sensitive customer information and to keep it safe and confidential.”

Specific Allegations

Plaintiff Mausteller alleges an unauthorized transaction appeared on his Lafayette debit card, which was subsequently canceled. Since the data breach, plaintiff Dibra claims she has experienced a spike in spam calls and texts using compromised PII, the report stated. 

The plaintiffs are suing for negligence and breach of contract and seek certification of the class action, damages, fees, costs and a jury trial.