Connex Credit Union Data Breach Affects 172,000 Members: Key Implications and What You Need to Know
Connex, one of Connecticut’s largest credit unions, has alerted tens of thousands of members about a data breach that resulted in the theft of personal and financial information. Founded in 1940, this member-owned, non-profit organisation boasts over $1 billion in assets and serves more than 70,000 members across eight branches in the greater New Haven area, including New Haven, Hartford, Middlesex, and Fairfield counties. In breach notification letters sent to affected individuals and filed with the office of Maine’s Attorney General, Connex revealed that it discovered the incident on June 3, one day after its network was compromised. The investigation indicated that unauthorised access to certain files occurred between June 2 and 3, 2025. While there is no evidence that attackers accessed members’ funds or accounts, Connex confirmed that a combination of personal and financial data, including names, account numbers, debit card information, Social Security numbers, and government IDs, was stolen.
In response to the breach, Connex has issued a scam alert on its official website, warning members about ongoing phishing attacks where scammers impersonate Connex employees. The organisation emphasised that it will never request PINs, passcodes, or account numbers via phone calls or texts. Members are advised to hang up and contact Connex directly at 1-800-CR-UNION (203-603-5700) if they receive suspicious communications. This disclosure follows a series of data breaches linked to the ShinyHunters extortion group, which has targeted high-profile companies through vishing and social engineering attacks. Additionally, the insurance sector has faced threats from the Scattered Spider hacker collective, which has recently shifted its focus to aviation and retail firms. Malware targeting password stores has surged threefold as attackers execute stealthy Perfect Heist scenarios, infiltrating critical systems.
Categories: Data Breach, Cybersecurity Threats, Phishing Scams
Tags: Connex, Data Breach, Personal Information, Financial Data, Phishing Attacks, Scam Alert, Cybersecurity, Non-Profit, Member-Owned, Investigation