The Washington State Office of the Attorney General reported a data breach involving the Washington State Employees Credit Union (WSECU) on December 1, 2023. The breach, occurring from October 28, 2023, to November 15, 2023, involved unauthorized access due to card skimmers placed on ATMs, affecting 1,216 individuals and potentially exposing names and financial information.

In November 2018, the Washington State Employees Credit Union (WSECU) suffered a data breach at its drive-thru ATMs between October 1 and October 31, 2018. The incident involved card skimmers—malicious devices installed on ATMs to secretly capture payment card details. Approximately 2,560 individuals were affected, with their cardholder names, account numbers, CVV codes, and PINs potentially exposed. The breach was discovered and reported by the Washington State Office of the Attorney General on November 16, 2018. The compromised data could enable fraudulent transactions, identity theft, or unauthorized account access, posing financial risks to the victims. While the breach was limited to ATM skimming and did not involve broader system infiltration, the exposure of sensitive payment card information—including PINs—heightened the severity. WSECU likely took corrective measures, such as reissuing cards, monitoring affected accounts, and enhancing ATM security, but the incident underscored vulnerabilities in physical transaction points. The breach primarily impacted customers’ financial security, with potential reputational damage to the credit union due to the loss of trust in its ATM infrastructure.