The California Office of the Attorney General reported that Golden 1 Credit Union experienced a data breach on April 7, 2018, April 14, 2018, and April 22, 2018. The breach involved the compromise of payment card information and personal identification numbers (PINs) from ATM usage at a Golden 1 branch in Roseville. The number of individuals affected is currently unknown.

On August 4, 2017, Golden 1 Credit Union suffered a data breach caused by illegal skimmer devices installed on its ATM machines. These skimmers were designed to covertly capture payment card details, including card numbers and Personal Identification Numbers (PINs), from unsuspecting customers. The breach exposed sensitive financial information, though the exact number of affected individuals remains undisclosed. The compromised data could enable fraudulent transactions, identity theft, or unauthorized access to bank accounts, posing significant financial risks to the victims. While the breach did not involve a direct cyber intrusion into Golden 1’s internal systems, the use of physical skimming devices highlights vulnerabilities in ATM security. Customers who used the affected ATMs during the breach period were at risk of financial losses, requiring the credit union to implement remediation measures such as card replacements, fraud monitoring, and heightened security protocols. The incident underscores the persistent threat of low-tech yet effective attack methods targeting financial institutions, emphasizing the need for robust physical and digital safeguards to protect customer data.

The California Office of the Attorney General reported that Golden 1 Credit Union experienced a data breach involving unauthorized access to member accounts between April 7, 2015, and June 17, 2015. The breach reportedly compromised full names, social security numbers, driver's license numbers, and other financial information of an unknown number of individuals. A notification letter was issued on July 24, 2015, and the organization has taken steps to terminate the employee involved and provide identity theft protection services to affected individuals.