Heritage South Data Breach: 300 GB of Data Stolen

On February 12, 2025, Heritage South Credit Union detected suspicious activity within its computer network. Upon discovering this unauthorized activity, the credit union immediately began an internal investigation, notified law enforcement, and took steps to secure its systems. Additionally, Heritage South Credit Union engaged a forensic security firm to assist with the investigation and ensure the security of its network.

The forensic investigation revealed that an unauthorized third party gained access to Heritage South's computer network initially on January 7, 2025, and again between February 6, 2025, and February 17, 2025. During this period, the unauthorized actor may have acquired certain files from the credit union's systems. According to a recent report on the dark web, the ransomware group known as EMBARGO has claimed responsibility for this cyberattack. EMBARGO claims to have obtained approximately 300 GB of data from Heritage South Credit Union, including sensitive personal and financial information. The group has threatened to publish the stolen data within a few days.

The data breach notification filed with the Massachusetts Attorney General's office indicates that two individuals in Massachusetts have been affected by this incident. However, the total number of individuals impacted across other states has not yet been publicly disclosed.

The types of consumer information exposed in this breach include:

• Social Security numbers
• Financial account numbers
• Names and addresses
• Phone numbers
• Email addresses

Given the sensitive nature of the information potentially compromised, this breach is considered serious. Unauthorized access to Social Security numbers and financial account details can lead to identity theft and financial fraud.

Heritage South Credit Union's response

In response to this data breach, Heritage South Credit Union has implemented enhanced technical security measures to reduce the risk of future incidents. Additionally, the credit union is offering affected individuals a complimentary two-year membership to Experian IdentityWorks Credit 3B. This service helps detect possible misuse of personal information and provides identity protection services focused on immediate identification and resolution of identity theft.

Affected individuals are encouraged to enroll in this complimentary identity protection service by visiting the Experian IdentityWorks enrollment page and using the activation code provided in the notification letter they received. For assistance with enrollment or identity restoration, affected individuals can contact Experian's customer care team at 877-288-8057.

In addition to enrolling in the identity protection service, affected individuals should remain vigilant by regularly reviewing account statements and monitoring credit reports for any suspicious activity. Consumers may also consider placing a fraud alert or a security freeze on their credit reports. Detailed instructions on how to place a security freeze and fraud alert are provided in the notification letter.

For further information and guidance on how to protect yourself from identity theft, you can visit the Federal Trade Commission's identity theft resource page.

A copy of the full data breach notification letter sent to affected individuals is available on the Massachusetts Attorney General's website.

About Heritage South Credit Union

Heritage South Credit Union is a not-for-profit financial cooperative serving communities in middle Tennessee and parts of Alabama. Founded in 1957 as EPCO Credit Union, the organization initially served employees of Empire Pencil Company. It was renamed Heritage South Community Credit Union in 2006 and has expanded significantly over the past six decades.

Membership at Heritage South Credit Union is open to anyone who lives, works, worships, or attends school in Bedford, Marshall, Rutherford, Cannon, or Maury counties, as well as the cities of Tullahoma, Manchester, Winchester, Decherd, or Fayetteville in Tennessee. Immediate family members of current members are also eligible to join. Recently, the credit union expanded its charter to include several counties in Alabama, including Talladega, Shelby, Jefferson, Tallapoosa, Coosa, Lee, Calhoun, Clay, St. Clair, Chambers, Elmore, Randolph, Cleburne, and Chilton.

Heritage South Credit Union offers a wide range of financial products and services, including savings accounts, checking accounts, loans, credit cards, certificates, and IRAs. The credit union operates under the motto "We Help When Others Won't," emphasizing personalized service and community involvement.

For more information about Heritage South Credit Union, you can visit their official website.