One of Connecticut’s largest credit unions has disclosed a major data breach that may have compromised sensitive personal information belonging to 172,000 people.

Connex Credit Union, which serves more than 70,000 members and manages over $1 billion in assets, reported the incident to state authorities after detecting suspicious activity in its systems. The breach notification, also filed with the Maine Attorney General’s Office, outlines the scope and nature of the compromised data.

Breach Discovery and Timeline

According to Connex, the intrusion was identified on June 3, 2025. Investigators determined that the attacker had unauthorized access to the organization’s systems for roughly 24 hours, from June 2 to June 3.

Data Potentially Compromised

Files that may have been accessed or exfiltrated contained sensitive information, including:

• Full names
• Account numbers
• Debit card details
• Social Security numbers
• Government-issued identification used for account opening

The credit union emphasized that there is currently no evidence suggesting direct access to members’ accounts or unauthorized transfers of funds.

Ongoing Risks and Warnings

Connex has also posted an alert on its official website, warning customers of ongoing phishing attempts involving fraudulent phone calls and text messages. In these scams, individuals impersonating Connex employees attempt to obtain PINs, passwords, and account details. The organization has not confirmed whether these scams are directly linked to the breach.

Attribution and Motive Unknown

At this time, the identity of the attacker remains unknown, and no threat group has claimed responsibility for the breach. It has not been confirmed whether ransomware was involved in the incident.

The investigation is ongoing, and Connex has stated that it is working closely with law enforcement and cybersecurity experts to strengthen its defenses and protect member data from further compromise.

Source: https://www.securityweek.com/connex-credit-union-data-breach-impacts-172000-people