FAIRMONT, W.V.– A two-year-old data breach affecting 187,000 people that includes not just financial information but also medical records has been confirmed by Fairmont Federal Credit Union, which said it discovered the breach in January 2024.
Several law firms have already announced their intention to seek class-action status in any litigation.
Information FCCU submitted to the Maine Attorney General’s Office revealed the breach itself occurred from Sept. 30-Oct. 18, 2023.
“As part of the investigation, FFCU engaged external cybersecurity professionals who regularly investigate and analyze these types of situations to help determine the extent of any compromise of the information on the FFCU network and conducted a manual review,” the $564 million Fairmont Federal said in its data breach notice.
But the review appears to have progressed slowly, according to FFCU, as it didn’t find out what type of data was stolen until August 2025, two years later. What makes matters worse is the enormous extent to which attackers accessed personal details.
Huge Amount of Data Revealed
According to the FFCU’s data breach notice, the exposed details include: full names, dates of birth, addresses, Social Security numbers, U.S. Alien registration numbers, passport numbers, driver’s license or state ID numbers, military ID numbers, tax ID numbers, non-U.S. national ID numbers, financial account numbers, routing numbers, financial institution names, credit card/debit card numbers, security code/PIN numbers, credit card/debit card expiration dates, IRS PIN numbers, treatment information/diagnosis, prescription information, provider names, MRN/patient IDs, Medicare/Medicaid numbers, health insurance policy/subscriber numbers, treatment cost information, full access credentials, security questions and answers, and digital signatures.
In its statement, the 45,000-member FFCU noted that not all data elements were impacted for every individual, meaning that the extent varies from person to person.
No Reports of Theft
FFCU said it is not aware of any incidents of identity theft or financial fraud related to the attack and that it will provide victims with complimentary identity theft prevention services.
One report stated that the dark web monitoring service Ransomware Live indicates that the now-defunct ransomware cartel BlackBasta targeted the credit union.
