LAFAYETTE FEDERAL CREDIT UNION

Lafayette Federal Credit Union (LFCU) issued a supplemental notice regarding an external system breach (hacking) on September 16, 2024. An unauthorized third party accessed one employee email account. LFCU discovered the incident on February 5, 2025, after a forensic review. The breach affected 77,337 individuals nationwide, including 124 Maine residents. Personal information, including names and other identifiers, was potentially acquired. LFCU secured the account, engaged forensic investigators, and offered 12 months of Experian credit monitoring.

Lafayette Federal Credit Union based in Rockville, Maryland, a financial services entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-02-05 and reported on 2025-07-15. 9,137 Texas residents were affected. 77,337 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Financial Information (e.g. account number, credit or debit card number);Other. Consumers were notified via U.S. Mail.

Lafayette Federal Credit Union reported that an unauthorized third party accessed an employee email account on September 16, 2024. The breach potentially exposed personal information, including names and other data elements, of affected members. LFCU secured the account, engaged forensic investigators, and is offering one year of complimentary credit monitoring to affected individuals.

Lafayette Federal Credit Union (LFCU) notified affected individuals that an unauthorized third party accessed a single employee email account on September 16, 2024. The breach may have exposed names combined with other personal information. LFCU secured the account, engaged forensic investigators, and offered one year of Experian IdentityWorks credit monitoring. No fraud or identity theft was detected.

Lafayette Federal Credit Union reported that an unauthorized third party accessed an employee email account on September 16, 2024. The breach may have exposed personal information, including names and other data elements, of affected members. The organization secured the account, engaged forensic investigators, and is offering one year of complimentary credit monitoring to affected individuals.

Lafayette Federal Credit Union (�LFCU�), a financial services/insurance entity filed a data breach notification with the Nebraska Attorney General. The breach was discovered on 2025-02-05 according to the AG's register. The breach is dated 2024-09-16. Nebraska residents were notified on 2025-03-20.

Lafayette Federal Credit Union reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-03-20. 757 Massachusetts residents were affected.

Lafayette Federal Credit Union notified Montana residents of a September 16, 2024 incident where an unauthorized third party accessed an employee email account, likely via phishing. The attacker may have acquired personal information including names combined with other data. LFCU secured the account, engaged forensic investigators, and is offering one year of Experian IdentityWorks credit monitoring to affected individuals.

Lafayette Federal Credit Union reported an external system breach (hacking) on September 16, 2024, where an unauthorized third party accessed an employee email account. The breach was discovered on February 5, 2025. Approximately 75,545 individuals were affected, including 118 Maine residents. Personal information, including names and financial account numbers, was potentially acquired. The credit union engaged forensic investigators and offered 12 months of Experian IdentityWorks credit monitoring to affected individuals.

LAFAYETTE FEDERAL CREDIT UNION ("LFCU") filed a data-breach notice with the Illinois Attorney General in March 2025 (case 25-03-028). The register records the breach as discovered on September 16, 2024. Personal information types reported: drivers license, financial account number, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.