Abri Credit Union reports data breach that went undetected for 18 months
Learn More
Abri Credit Union, a financial institution in Romeoville, Illinois, is reporting a data breach that was not detected for over 18 months. Attackers breached the Abri network between May 3 and May 4, 2024.
Abri Credit Union did not detect the breach until December 1, 2025, when outside experts did a forensic review of the systems.
The exposed data includes:
- Full names
- Social Security numbers
- Driver’s license numbers
- Credit and debit card numbers
- Financial account data
The breach hit 14,354 people across the United States. The nature of the attack is not disclosed. Abri Credit Union is sending notification letters to victims and offering credit monitoring.
It's suspected that the information may already be on the dark web.
