Ellafi Federal Credit Union

Ellafi Federal Credit Union reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-12-27. 134 Massachusetts residents were affected.

Ellafi Federal Credit Union experienced an external system breach (hacking) on October 14, 2025. The incident compromised names, SSNs, and credit/debit card numbers for 17,627 individuals, including 40 Maine residents. EFCU discovered the incident on November 20, 2025, notified the FBI, and sent consumer notifications on December 23, 2025, offering 12 months of credit monitoring.

Ellafi Federal Credit Union experienced unauthorized access to files containing personal information, including names, SSNs, and credit/debit card numbers, on October 14, 2025. The credit union engaged cybersecurity experts, notified the FBI, and is offering 12 months of complimentary identity protection services. No evidence of misuse was found.

Ellafi Federal Credit Union notified the New Hampshire Attorney General of a data security incident affecting approximately 49 NH residents. Unauthorized access to systems occurred around October 14, 2025, with confirmation of accessed PII (names, SSNs, card numbers) on November 20, 2025. Notifications were sent on December 23, 2025. The credit union engaged forensic experts, notified the FBI, and provided 12 months of credit monitoring via IDX.

Ellafi Federal Credit Union notified Nebraska AG of a data security incident discovered on October 14, 2025, involving unauthorized access to systems. Approximately 1 Nebraska resident was affected, with potential exposure of names, SSNs, and credit/debit card numbers. EFCU engaged forensic experts, notified the FBI, and provided 12 months of credit monitoring via IDX.

Ellafi Federal Credit Union reported a data breach to the Indiana Attorney General. The breach occurred on 2025-10-14 and was reported on 2025-12-23. 6 Indiana residents were affected. 17,627 individuals affected in total.