Communication Federal Credit Union (CFCU), a $2.3-billion financial institution, suffered a data breach between late December 2023 and early January 2024, resulting in unauthorized access to its systems. The incident exposed sensitive personal data of members, including names, birthdates, addresses, Social Security numbers, driver’s license details, and financial account information. Following an investigation, CFCU notified affected individuals and agreed to a $2.9-million class-action settlement, which received preliminary court approval in August 2025. The breach led to potential financial fraud risks for members, reputational damage for the credit union, and legal repercussions. While CFCU denied wrongdoing, it committed to enhancing data security measures. Compensation for victims will be distributed pending final court approval and resolution of any appeals.

Communication Federal Credit Union (CFCU) suffered a targeted cyberattack between Dec. 31, 2023, and Jan. 11, 2024, exposing sensitive personal and financial data of customers. The breach compromised names, dates of birth, addresses, Social Security numbers, driver’s license numbers, bank account details, and bank card numbers. The incident led to a $2.9 million class-action settlement, offering affected individuals up to $7,500 in reimbursement for out-of-pocket losses (e.g., credit monitoring, identity theft recovery) or a pro rata cash payment (~$125). Additionally, CFCU agreed to provide three years of identity theft protection and credit monitoring (including $1M insurance) and invest $986,000 over five years in cybersecurity improvements. The lawsuit alleged negligence in safeguarding data, though CFCU denied wrongdoing. The breach notification impacted U.S. residents tied to the incident, with claims processed until Dec. 22, 2025.