Fairmont Federal Credit Union 2023 data breach impacted 187K people

Fairmont Federal Credit Union (FFCU) says a 2023 data breach exposed personal, financial and medical information for 187,038 members. The incident was detected in January 2024, with the investigation continuing until August 2025, and authorities noted that threat actors had accessed data between 30 September and 18 October 2023.

The data accessed varied by individual, but the breach included items such as full names, dates of birth, Social Security numbers, financial details, and health information, with some victims having card or debit details exposed as well. FFCU has not reported any fraud to date, but began offering free credit reports and monitoring for those affected starting 11 September 2025, and, according to the Maine Attorney General, provided complimentary access to Experian IdentityWorks for 12 or 24 months.

The organization did not disclose technical attack details, though the Black Basta ransomware group claimed responsibility for the breach. This advisory underscores the breadth of data at risk and the ongoing steps credit unions may take to support impacted members.