Cross Valley Federal Breach Affects 17,826 People

On December 4, 2024, Cross Valley Federal Credit Union discovered suspicious activity on its network, indicating unauthorized access had occurred. Upon identifying the breach, the credit union immediately took steps to contain the intrusion and secure its systems. Cross Valley Federal Credit Union then engaged cybersecurity experts to thoroughly investigate the incident.

The cybersecurity investigation revealed that unauthorized individuals potentially accessed sensitive personal information, like social security numbers, belonging to approximately 17,826 people across the United States.

Cross Valley Federal Credit Union notified affected consumers in writing on March 13, 2025. Additionally, the credit union formally reported the incident to the Maine Attorney General's office on March 24, 2025. According to the official disclosure available on the Maine Attorney General's website, two residents of Maine were among those impacted.

At this time, Cross Valley Federal Credit Union has not publicly identified the individuals or group responsible for the breach, nor has it provided specific details about how the unauthorized access occurred.

Cross Valley Federal Credit Union's response

Following the discovery of the breach, Cross Valley Federal Credit Union took immediate action to secure its network and prevent further unauthorized access. The credit union isolated the intrusion, secured its environment, and promptly notified regulators as required by law.

To help prevent similar incidents in the future, Cross Valley Federal Credit Union has implemented several enhanced security measures, including:

• Enhanced cybersecurity training for employees
• Additional security protocols for email links
• Sandboxing potential email threats to isolate and analyze suspicious content

To assist affected individuals, Cross Valley Federal Credit Union is offering complimentary credit monitoring and identity theft protection services through CyberScout, a TransUnion company specializing in fraud assistance and remediation services. These services include single-bureau credit monitoring, credit reports, credit scores, and proactive fraud assistance. Affected individuals must enroll within 90 days from the date of notification to receive these free services.

Cross Valley Federal Credit Union advises affected consumers to remain vigilant by regularly reviewing account statements and monitoring credit reports for suspicious activity. Consumers are also encouraged to consider placing fraud alerts or security freezes on their credit files. For further details on recommended actions, affected individuals can refer to the full consumer notification letter provided by Cross Valley Federal Credit Union, included at the bottom of this article in PDF format.

If you have additional questions or concerns, Cross Valley Federal Credit Union has established a dedicated toll-free hotline at 1-833-799-3982, available Monday through Friday from 8:00 a.m. to 8:00 p.m. Eastern Standard Time.

For more information, visit the Cross Valley Federal Credit Union website.