Abri Credit Union experienced a data security incident where unauthorized access to its internal network occurred between May 3, 2024, and May 4, 2024. The credit union discovered this breach on December 1, 2025, following a forensic investigation. Subsequently, official notifications were sent to the Attorneys General of Massachusetts and Washington on December 30, 2025.
The confirmed data types exposed in this breach include names, Social Security numbers, dates of birth, addresses, government IDs, medical information, financial information, driver’s license numbers, payment card numbers, health insurance information, digital signatures, birth certificates, and marriage certificates. At least 2,942 individuals have been affected, with current counts showing 463 in Massachusetts and 629 in Washington; the investigation is ongoing. However, Abri Credit Union has stated it has no evidence that any personal information has been or will be misused.
Details about data breaches can emerge over time, and consumer notice processes may experience delays.