Suffolk Credit Union, a Medford, New York-based financial institution, notified members in September 2026 that a former vendor, Mercadien, P.C., CPAs, experienced unauthorized access to its systems. The vendor incident occurred between September 17 and October 9, 2025. The available notice describes the incident as potentially exposing some Suffolk Credit Union members’ personal information.
The confirmed data included names combined with certain other personal information, but the notice did not specify the additional information. It did not disclose an entity-level number of affected individuals, and the available source does not confirm exposure of Social Security numbers, medical information, bank account information, or payment-card data. Suffolk Credit Union offered free credit monitoring to affected members. Further details may emerge as breach notices and investigations continue.