Appalachian Community Federal Credit Union Suffers Data Breach, Exposing Member Information Appalachian Community Federal Credit Union (ACFCU), a Tennessee-based financial institution, recently disclosed a significant data security breach that occurred last year. The incident compromised sensitive personal information belonging to its members. While specific details about the breach including the exact timeline, attack vector, and full scope of exposed data remain limited, the disclosure highlights growing cybersecurity risks facing financial organizations. The breach underscores the persistent threat of unauthorized access to customer data, which can lead to identity theft, financial fraud, and long-term reputational damage for affected institutions. ACFCU has not publicly confirmed whether the breach was the result of a cyberattack, insider threat, or system vulnerability. Further investigations may reveal additional insights into the incident’s origins and impact.

Appalachian Community Federal Credit Union Hit by Qilin Ransomware Attack, Exposing Sensitive Member Data Appalachian Community Federal Credit Union (ACFCU), a member-owned financial cooperative serving communities in Tennessee, Virginia, and Kentucky, disclosed a ransomware attack that compromised sensitive personal and financial data. The breach was detected on October 7, 2025, when the credit union identified a disruption in its computer systems. After taking its network offline and launching a forensic investigation, ACFCU confirmed on October 10, 2025, that data had been exfiltrated. The attack was attributed to Qilin, a ransomware group that later claimed responsibility, publishing 75 GB of stolen data on the dark web on November 18, 2025. A thorough review determined that exposed information included names, Social Security numbers, and financial account details. Affected individuals were notified on December 1, 2025, and the incident was reported to federal law enforcement and the Massachusetts Attorney General’s office on December 31, 2025. As of the notification, ACFCU stated there was no evidence of fraud or misuse stemming from the breach. The credit union offered affected members free credit monitoring and fraud assistance through Cyberscout (a TransUnion company) as part of its response. The investigation into the breach remains ongoing, with class action law firm Shamis & Gentile P.A. examining potential legal claims for compensation on behalf of impacted individuals.