DUBLIN, Ohio–Member data from the ransomware attack on Patelco Credit Union is now available for sale online after the hackers said they were unable to reach an agreement with the credit union, according to a new report that also indicates the number of people potentially affected is larger than initially reported.
According to Security Week, data from the breach at the $9-billiion Patelco was added to the RansomHub ransomware group’s website on August 16.
Two Weeks of Negotiations
“The cybercriminals claimed to have conducted negotiations for two weeks, but could not reach an agreement with the financial organization so they are now auctioning the sensitive data they have stolen,” Security Week reported. “A sample made public by the hackers shows that the databases contained information such as name, postal address, phone number, email address, date of birth, gender, Social Security number, driver’s license number, password, and credit rating.”
As CUToday.info has been reporting, Patelco publicly announced on June 29 that a ransomware attack had occurred, which had led to its online and mobile services being disabled, along with numerous other issues that also affected branch operations.
But it has since confirmed that it learned that an unauthorized party had gained access to its network on May 23, 2024, and that it has since been able to confirm that members’ personally identifiable information had been obtained.
Number Affected Tops 700,000
Meanwhile, while reports to date have indicated the breach affected the credit union’s 507,422 members, the data breach notification filed with Maine’s Attorney General shows the total number of people affected is approximately 726,000.