SRP Federal Credit Union, a high-profile financial institution based in South Carolina, fell victim to the Nitrogen Ransomware attack on December 5, 2024, impacting over 195,000 customers. The attack involved file encryption (appending `.NBA` extensions) and data exfiltration, with threat actors demanding ransom under the threat of publishing stolen data. The ransomware employed anti-analysis techniques (debugger/Virtual Machine detection, code obfuscation) and exploited the vulnerable driver *truesight.sys (BYOVD attack) to bypass EDR systems and terminate security processes. System recovery was sabotaged via bcdedit.exe manipulations to disable Windows Safe Boot. The attack leveraged double extortion tactics, combining encryption with data theft, while using malicious ads* and fake software downloads as initial infection vectors. The incident disrupted financial operations, exposed sensitive customer data, and posed severe reputational and operational risks to the credit union.

The Maine Office of the Attorney General reported that SRP Federal Credit Union experienced an external system breach due to hacking, potentially affecting a total of 260,950 individuals, with 40 specifically identified as residents of Maine. The breach occurred between September 5, 2024, and November 4, 2024, with discovery on November 22, 2024, and notifications sent to consumers on December 12, 2024, and February 3, 2025.