The California Office of the Attorney General reported a data breach involving SAFE Credit Union on February 22, 2024. The incident may have compromised debit card and credit card information during ATM transactions occurring from January 28, 2024, through February 4, 2024, at locations in North Highlands and Sacramento, CA. Specific details regarding the number of affected individuals are unknown.

The California Office of the Attorney General disclosed on December 30, 2022, that SAFE Credit Union suffered a data breach affecting debit and credit card transactions conducted via ATMs between October 1, 2022, and November 23, 2022. The incident exposed sensitive payment details, including card numbers, cardholder names, and PINs, potentially enabling unauthorized access or fraudulent transactions. While the breach did not involve broader personal data (e.g., Social Security numbers or addresses), the compromise of financial credentials poses significant risks, such as account takeovers, unauthorized withdrawals, or identity theft for affected customers. The exposure of PINs further escalates the threat, as it eliminates a critical layer of authentication for ATM and point-of-sale transactions. SAFE Credit Union likely initiated mitigation measures, such as card reissuance, transaction monitoring, and customer notifications, but the incident underscores vulnerabilities in payment system security and the persistent targeting of financial institutions by cybercriminals. The breach’s scope—spanning nearly two months—highlights potential delays in detection, amplifying the window for exploitation.