Operating Engineers Federal Credit Union Data Breach Exposes 100K Members To Identity Theft. Featured
Lawsuit alleges OEFCU’s failure to adequately secure its network allowed cyber-criminals to steal 1.13TB of members personal information.
A class action lawsuit was recently filed against the Operating Engineers Federal Credit Union (OEFCU) after it announced that it experienced a data breach in 2023 that compromised the personal and medical information of its member base.
OEFCU, headquartered in Livermore, California, is the largest labor based credit union in the country serving more that 135 union groups and, 32 trades across five states.
What Happened?
According to a Security Notice posted on its website, on or about October 28, 2023, OEFCU detected unauthorized access on its network. It immediately began efforts to secure its systems, notified law enforcement and retained a third party cybersecurity to help with its investigation.
On April 1 2024, OEFCU announced the investigation confirmed that an unauthorized actor may have accessed sensitive personal and medical information between approximately August 19, 2023, and October 29, 2023.
Ransomware group NoEscape claimed the attack on October 29, 2023, and claimed to have stolen 1.13 TB of data.
What Information Was Stolen?
According to the Security Notice, information stolen during the breach includes:
- Name
- Social Insurance number
- Date of birth
- Taxpayer ID number
- Driver’s license or government ID number
- Passport number
- Financial information (e.g., accounting information, routing number, credit and/or debit card numbe4r, expiration date)
- Username and password
- Medical Information (e.g., medical procedure information, clinical or treatment information, medical provider name, medical record number, prescription information)
- Health insurance information
What is OEFCU Doing To Protect My Identity?
Per the Notice of Data Breach, OEFCU is offering affected individuals complimentary access to credit monitoring services for twelve (12) months.
What Can Hackers Do With My Information?
Stolen PII and PHI can be used to commit identity theft, open new credit accounts, make unauthorized purchases or obtain loans. Cyber-criminals have recently targeted America’s essential industries and in so doing have forced millions of Americans to face the fallout from these attacks.
Leaked or stolen data can be sold on the dark web forums and may be used for fraud and medical identity theft, a type of fraud, where threat actors use stolen information to submit forged claims to insurers.
Clients affected by the breach are exposed to a heightened and imminent risk of fraud and identity theft. They must now and in the future closely monitor their financial accounts to guard against identity theft and fraud.
If you receive a data breach notification from OEFCU, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options at no cost to you. For more information, please review these recommendations.
Protect Your Identity. Join the OEFCU Data Breach Class Action.
The lawsuit alleges that OEFCU breached its duties under common law and the Federal Trade Commission Act to implement reasonable security measures, comply with industry standards and federal data-security regulations, encrypt sensitive data, and provide adequate and timely notice of the breach.
If you receive a notification letter from OEFCU, you are at permanent risk of identity theft and the devastating financial and legal consequences that go along with it.
You may be eligible to participate in a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.
The lawsuit looks to cover anyone in the USA whose private information was compromised by the breach announced by OEFCU.
Please complete the below form shown on this page and a data breach attorney will contact you. There is no cost to you.