Incident

Georgia Heritage Federal Credit Union Reports Ransomware Attack Affecting 43,077 Members


Learn More

Georgia Heritage Federal Credit Union (GHFCU) reports a ransomware attack that compromised the sensitive data of 43,077 individuals. The incident began on January 25, 2025, when attackers breached the organization's external systems to encrypt digital files. 

GHFCU engaged a third-party cybersecurity firm to investigate and a data mining vendor to identify the specific records accessed during the dwell time. The compromised data includes:

  • Social Security numbers and Social Insurance numbers
  • Financial account information
  • Passport and driver's license information
  • Foreign National ID numbers
  • Health-related information
  • Dates of birth and employment-related information
  • Full names and home addresses
  • Personal email addresses and telephone numbers

The number of affected individuals is 43,077. The total financial impact and ransom demands have not been disclosed. The incident was reported to authorities between January and April 2026. 

GHFCU is providing 12 months of free credit monitoring and identity restoration services. Additionally, the organization hired HaystackID to provide proactive fraud assistance and remediation services for those whose highly sensitive identifiers were exposed.

Georgia Heritage Federal Credit Union Reports Ransomware Attack Affecting 43,077 Members