DEPEW, N.Y.–Two more credit unions have notified members of data breaches.

In New York, the $94.3-million Good Neighbors FCU said in a message to members posted on its website that it has learned that around Dec. 10, 2024, an outside party gained unauthorized access to its network.

“Upon learning of this issue, we immediately initiated a prompt and thorough investigation. As part of our investigation, we have been working very closely with external cybersecurity professionals experienced in handling these types of incidents,” GNFCU said. “After an extensive forensic investigation and comprehensive document review, we determined on April 4, 2025, that some personal information stored on our network may have been accessed and/or acquired by an unauthorized individual.”

That personal information varied by individual, Good Neighbors FCU told members, but includes Social Security numbers, driver’s license numbers, financial information, account numbers, credit card or debit card numbers, medical information and health insurance information.

‘No Evidence of Misuse’

“GNFCU has no evidence that any personal information has been or will be misused as a

direct result of this incident,” the 10,5332-member CU said. “However, out of abundance of caution, commencing on May 1,2025, GNFCU notified individuals whose information  may have been included in the files accessed by the unauthorized party to the extent it had contact information. Notified individuals have been provided with best practices to protect their information, and individuals whose Social Security numbers were contained in the impacted files have been offered complimentary credit monitoring.”

GNFCU did not state how it believes the breach occurred. 

Breach in California

Separately, Redondo Beach, Calif.-based South Bay Credit Union has sent a letter to members informing them of a breach. 

“While there is no indication that any information has been misused, we are providing information about the event and steps you can take to help protect your information, should you feel it is appropriate to do so,” the credit union reported.

It said that on or about Nov 18, 2024, it discovered “suspicious activity” related to one employee’s email account. 

“Upon discovery, SBCU took immediate action to secure the account and engaged a team of third-party specialists to investigate the incident,” SBCU said. “The investigation determined that an unauthorized individual had gained access to one email account. SBCU then reviewed the content of the email account to determine the types of information contained therein and to whom that information related. 

‘Thorough Review’

“On January 7, 2025, following a thorough review, SBCU confirmed that a limited amount of personal information may have been  accessed by an unauthorized party in connection with this incident,” its statement added.

SBCU said potentially compromised information includes email addresses and first and last names.

“Upon learning of this event, steps were taken to secure the email account, undertake a thorough investigation, and confirm necessary technical safeguards are in place,” South Bay CU stated.

The credit union is offering complimentary credit monitoring and identity protection to members.