Incident

First Commonwealth Credit Union reports data reach exposing SSNs of 100k people


Learn More

First Commonwealth Federal Credit Union (“First Commonwealth”) reports a data breach after discovering that an unauthorized party had accessed its computer system.

First Commonwealth Federal Credit Union is based in Lehigh Valley, Pennsylvania, and provides a range of financial products and services, including checking and savings accounts, secured and unsecured loans, mortgages, investments, and insurance products.

On June 27, 2024, First Commonwealth detected suspicious activity within its IT network. The company secured its system and launched an investigation with the assistance of third-party cybersecurity experts.

The investigation revealed that the unauthorized party accessed the network on June 26, 2024, and that some of the compromised files contained confidential consumer information. The exposed data includes:

  • Names
  • Social Security numbers
  • Account numbers

The nature of the attack is not disclosed. Approximately 100,000 individuals are impacted by the incident

First Commonwealth began sending out data breach notification letters on August 2, 2024, to all individuals affected by the incident.

First Commonwealth Credit Union reports data reach exposing SSNs of 100k people