Incident

First Federal Savings & Loan Association Data Breach Investigation


Learn More

First Federal Savings & Loan Association of Pascagoula Moss Point, a Mississippi-based bank, reports a cybersecurity incident that exposed sensitive customer data. 

Attackers breached the bank's internal systems between February 9 and February 10, 2025. The bank did not discover the intrusion until December 5, 2025, following a manual review by external security experts. Reports from threat intelligence sources suggest the Play ransomware group may be responsible for the attack, but the group has not claimed the attack. 

The attackers successfully stole records containing personally identifiable information (PII) and financial data from the bank's servers. The compromised data includes:

  • Full names and home addresses
  • Social Security Numbers
  • Driver’s license and government-issued ID numbers
  • Financial account, credit, and debit card numbers
  • Medical information and dates of birth

The nature of the attack and the number of affected individuals is not disclosed.

First Federal reported the breach to authorities on January 5, 2026 and recommends that customers monitor their financial statements and place fraud alerts on their credit files. The bank has started notifying victims and is offering credit monitoring services.

Multiple law firms have launched investigations into the bank's security practices and are reviewing potential class-action claims on behalf of affected individuals. 

First Federal Savings & Loan Association Data Breach Investigation