PhysicalFinancial ServicesFinanceSkimmerTargetedPIIFinancial accountLowContained

Workers Federal Credit Union

bd_f9b1451616070fca · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 16, 2026

Filed

Feb 6, 2026

To disclose

21 days

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Workers Federal Credit Union →10 incidents on file

Workers Federal Credit Union reported a debit card skimming incident affecting one New Hampshire resident. Unauthorized access occurred Jan 14-16, 2026, at an unidentified non-WCU location. Compromised data included names and debit card numbers. WCU reimbursed the member, issued replacement cards, and notified law enforcement.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 21 days

Jan 14, 2026

Begins

Jan 16, 2026

Discovered

Feb 6, 2026

Filed

vs. sector median

6 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_3f769b28409e37622026-02-06Verified

Name: Workers Federal Credit Union
norm: workers federal credit union
Domain: wcu.com
Industry: financial_services

Name: Workers Federal Credit Union
norm: workers federal credit union
Domain: wcu.com
Industry: financial_services
Industry: Financial Servicesllm

Discovered: Jan 16, 2026
Breach occurred: Jan 14, 2026 – Jan 16, 2026
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 16, 2026
Affected individuals: 1state-resident count only
Data types: PIIFinancial account
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Notified appropriate regulatory bodies and law enforcement authorities

During the incident: Activated our Incident Response Team and conducted cross-functional coordination among Risk, Retail, IT, Deposit Operations, and Enterprise Banking Systems
Conducted a comprehensive review of ITM and ATM transaction logs and video surveillance across all branch locations
Performed physical inspections of all Workers ITMs and ATMs to confirm no skimming devices were present
Contacted all identified impacted members and facilitated the completion of unauthorized transaction disputes
Reimbursed all impacted members in full for confirmed fraudulent transactions
Issued replacement debit cards to all impacted members as part of standard remediation
Implemented temporary risk mitigation measures, including reducing daily ITM cash withdrawal limits and routing higher-dollar withdrawals to video tellers
Notified appropriate regulatory bodies and law enforcement authorities
Initiated an operational review of transaction velocity controls and withdrawal limit monitoring to address identified process gaps
Implemented ongoing monitoring of member accounts for suspicious activity
Changes made: An educational blog on contactless payments and ATM skimming will be posted on Workers Federal Credit Union’s website
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 days(21 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGFeb 6 · first

New Hampshire State AGFeb 6 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/workers-federal-credit-union-20260206.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 6, 2026
Raw hash: 4926fc04540ff43c35ffd2e4d182bd4428207d245cbe81b45d40b5e589491527

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityWorkers Federal Credit Union

Victim entityWorkers Federal Credit Union

Incidentdiscovered Jan 16, 2026

Stated responseActivated our Incident Response Team and conducted cross-functional coordination among Risk, Retail, IT, Deposit Operations, and Enterprise Banking Systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov