Patelco Credit Union suffered a ransomware attack that resulted in a significant data breach, affecting over 1 million people. Personal information, including names, Social Security numbers, driver’s license numbers, dates of birth, and email addresses, was compromised. Initially reported as affecting 726,000 individuals, further investigations increased this figure to 1,009,472. The incident prompted Patelco to offer free identity protection services for two years to those impacted. The breach not only threatened the privacy of customers but also exposed the credit union to potential financial and reputation damage.

Patelco Credit Union Hit by Ransomware Attack, Disrupting Customer Access Dublin-based Patelco Credit Union, one of the largest credit unions in the Bay Area, confirmed a ransomware attack over the weekend that forced the institution to shut down its banking systems. The incident, which began on Saturday, has left 500,000 customers unable to access electronic transactions, including transfers, direct deposits, balance inquiries, and bill payments. Customers reported frustration after discovering ATMs and online services were unavailable, with some branch employees unable to retrieve account information. While in-person withdrawals remain possible, limits such as a $500 cap have caused additional inconvenience, forcing some to travel to distant branches. Patelco is working with a third-party cybersecurity team to investigate the breach and restore operations, though the timeline for recovery remains unclear. Ahmed Banafa, a cybersecurity expert and professor at San Jose State University, explained that ransomware typically enters systems when employees click on malicious links or files, allowing hackers to encrypt data and demand payment often in cryptocurrency for decryption. The attack highlights the growing threat of ransomware against financial institutions, with potential risks to customer data and financial security. Patelco has not disclosed whether a ransom was demanded or if any personal information was compromised. Branches remain open, but services remain limited until systems are fully restored.

The Vermont Office of the Attorney General reported a data breach involving Patelco Credit Union on September 23, 2024. The breach resulted from a ransomware attack that was detected on June 29, 2024, where unauthorized access to databases occurred starting May 23, 2024, affecting personal information of current and former members and employees. Approximately 54 Rhode Island residents were impacted.

The California Office of the Attorney General reported that Patelco Credit Union experienced a data breach involving ATM skimming on April 12, 2023. The breach occurred between February 8 and March 14, 2023, with compromised information including cardholder names, card numbers, expiration dates, and card verification codes.