IRCO Community Federal Credit Union notified Massachusetts residents of a data breach involving its former vendor, Mercadien P.C. On November 7, 2025, Mercadien detected unauthorized access to its Box environment, which contained files with personal information of IRCO individuals. IRCO states its own systems were not impacted. The incident involved names. IRCO is offering complimentary credit monitoring via Experian IdentityWorks.