UnknownFinancial ServicesFinanceCustomer Data InvolvedPIIIdentity (basic)Government IDMediumContained

Direct Federal Credit Union

bd_5c51d5e4aef23996 · schema v1 · pii pii-v2

Severity

Medium

Discovered

—

Filed

Sep 1, 2026

To disclose

—

Affected

1state residents only

Confidence

70%

Full breach record for Direct Federal Credit Union →8 incidents on file

Digital Federal Credit Union (DCU) notified members of a data security incident occurring on or around August 18, 2026. The incident involved personal information, including names, addresses, Social Security Numbers, and dates of birth. DCU stated it has contained the incident and is reviewing security measures. Affected individuals are offered one year of Equifax Complete Premier identity theft protection.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 18, 2026

Begins

Sep 1, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Direct Federal Credit Union
norm: direct federal credit union
Domain: dcu.org

Name: Direct Federal Credit Union
norm: direct federal credit union
Domain: dcu.org
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Aug 18, 2026
Materiality determined: —
Notification sent: Sep 23, 2026
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)Government ID
Attack vector: Unknown

During the incident: Conducted a thorough review of the incident
Taken steps to prevent any further unauthorized access to your records or account
Retained Equifax to provide one year of Equifax Complete Premier, free of charge
Changes made: Review and, if necessary, enhance its security measures designed to prevent a recurrence of such a breach
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1610-first-technology-federal-credit-union/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 1, 2026
Raw hash: 8d77b6230bf6867e9b8129c469244cb9683c6db68b9ec2f6858722500a44074f

Reporting entityDirect Federal Credit Union

Victim entityDirect Federal Credit Union

IncidentUnknown

Stated responseConducted a thorough review of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov