FIRST HARVEST Federal Credit Union

First Harvest Federal Credit Union reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-05-06. The reporting organization type is Financial Services. 7 Vermont residents were affected. Categories of data breached: Social Security Numbers, Financial Account Codes, Credit or Debit Account Info.

First Harvest Federal Credit Union experienced an unauthorized access to an employee email account on January 14, 2026. The breach was discovered on February 3, 2026. Data potentially accessed included names, SSNs, and financial account/payment card information. Eight Maine residents were notified on May 6, 2026. Credit monitoring was offered.

First Harvest Federal Credit Union notified Massachusetts and Rhode Island residents of a security incident involving unauthorized access to an employee email account. The breach, discovered on February 3, 2026, resulted from suspicious activity likely stemming from a phishing attack on January 14, 2026. The incident exposed name data elements and potentially government identifiers (SSN, DOB, driver's license) of affected individuals. First Harvest engaged third-party forensic reviewers, enhanced security policies, and offered 12-24 months of credit monitoring via Experian. No actual misuse of information was indicated at the time of notification.

First Harvest Federal Credit Union notified the NH AG of a data event affecting 16 NH residents. An unknown actor accessed an employee email account on Jan 14, 2026, after suspicious activity was detected on Feb 3, 2026. Data potentially exposed included names, SSNs, and financial/payment card info. The credit union provided 12 months of credit monitoring via Kroll/Experian and notified regulators.

First Harvest Federal Credit Union notified Nebraska residents of a data breach involving unauthorized access to an employee email account. The incident, discovered on February 3, 2026, involved an unknown actor accessing data on January 14, 2026. Affected data included names, SSNs, and financial/payment card details. Two Nebraska residents were notified on May 6, 2026. The credit union provided 12 months of credit monitoring via Experian and implemented additional security safeguards.