MIDDLETOWN, Conn. — A Connecticut resident has filed a proposed class-action lawsuit against $175-million Ellafi FCU, alleging the Middletown-based credit union failed to adequately protect member data in a cyber breach that exposed personal information of more than 17,600 people, Hartford Business reported.
The complaint, filed Jan. 7 in U.S. District Court in Connecticut, was brought by Joseph Fraulino, identified as a Middlesex County resident and Ellafi member, on behalf of himself and others whose personal information was allegedly compromised. Court filings indicate the plaintiff is seeking at least $5 million in damages on behalf of the proposed class.
According to the lawsuit, hackers accessed Ellafi’s network on or about Oct. 14, 2025, and exfiltrated data that included names, Social Security numbers, and credit or debit card numbers. The filing states Ellafi discovered the intrusion later that month and completed an internal investigation on Nov. 20.
The suit contends that Ellafi did not notify affected members until late December, roughly two months after detecting the breach, leaving individuals unaware their personal information may have been exposed. Fraulino said he received written notice around Dec. 23, and the lawsuit claims Ellafi later reported to the Maine attorney general’s office that 17,627 individuals were impacted, Hartford Business explained.
In a statement emailed Thursday, Ellafi said it disputes the allegations and intends to defend itself “through the appropriate legal process.” The credit union said it launched an investigation with cybersecurity specialists upon learning of the intrusion, determined certain member information “may have been accessed,” notified affected members within required timelines, and provided complimentary credit monitoring services, according to Hartford Business.