Co-op Credit Union, a member-owned financial cooperative with over 19,000 members and $305 million in assets, suffered a data breach in April 2025 when a cybercriminal gained unauthorized access to an employee’s email account between April 8 and April 18. The breach was discovered in April, but an investigation concluded on July 23, 2025, confirming that sensitive personally identifiable information (PII) was exposed. The compromised data included names, Social Security numbers, and credit/debit card numbers, putting affected members at risk of identity theft and financial fraud. The breach was reported to the Massachusetts Attorney General’s office on October 21, 2025, and notifications were sent to impacted individuals. The credit union offered 24 months of free credit monitoring via Experian IdentityWorks, but the total number of affected members remains undisclosed. Legal action is being pursued by Shamis & Gentile P.A. for compensation related to damages, out-of-pocket expenses, and emotional distress.