ALLENTOWN, Penn.–Additional law firms are now seeking plaintiffs to be part of potential litigation against individual credit unions and TruStage, following the data security incident at the company that provides services to almost every credit union.
Shamis & Gentile, a class action law firms specializing in data breach cases, said it is investigating First Commonwealth Federal Credit Union in Pennsylvania regarding a “data breach,” although to date TruStage has not confirmed there has been a breach of member data at any credit union.
“If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation,” ClaimDepot stated. “On July 15, 2026, First Commonwealth Federal Credit Union’s insurance partner, TruStage, disclosed a cybersecurity incident that affected its systems….If your information was compromised in the First Commonwealth Federal Credit Union data breach, you may be eligible for compensation. Lawyers are ready to help you determine your eligibility and take action.”
As the CU Daily was first to report, Bessemer System Federal Credit Union has filed a class action lawsuit in federal court against TruStage Financial Group that alleges that TruStage failed to implement and maintain adequate, industry-standard cybersecurity safeguards, culminating in the cybersecurity incident TruStage disclosed on July 15, 2026.
TruStage Offers Update
As the CU Daily reported here, TruStage President and CEO Terrance Williams said the company has begun restoring systems following the cyber incident that is likely the result of an employee downloading a malicious file, an incident that has forced it to shut down its network beginning last week. Williams cautioned that the recovery will take place over “days and weeks” as the insurer works through a phased restoration process.
In a video update to credit union partners, Williams said the investigation into the incident remains ongoing and that it is still too early to determine whether any data was accessed.
