First Harvest Federal Credit Union experienced a data breach that began on January 14, 2026, and was discovered on February 3, 2026. The credit union publicly disclosed the breach and began notifying affected individuals on May 6, 2026, after completing its investigation on April 17, 2026. This incident was reported to the Attorneys General of Maine and Vermont.
The breach involved an external system compromise, specifically unauthorized access to an employee email account. The types of data exposed include names, Social Security numbers, dates of birth, addresses, government IDs, medical information, financial account information, and payment card information. At least 8 Maine residents were affected; the total number of individuals impacted is not publicly available.
More information about this breach may become available as investigations continue, and notifications to affected consumers are ongoing.