Chevron Federal Credit Union

Chevron Federal Credit Union experienced a data breach involving the MOVEit file transfer service provided by Progress Software. An unauthorized party exploited a previously unknown vulnerability (zero-day) in the MOVEit application to decrypt and download files between May 30 and May 31, 2023. The incident was discovered on August 1, 2023, after new detection methods were published. Personal information, including basic identity data, was compromised. The organization engaged third-party forensics, remediated the vulnerability, and offered one year of credit monitoring to affected members.