• December 2025 •

MetroWest Community Federal Credit Union Data Breach

Last Updated on March 12, 2026

If your information was compromised in the MetroWest data breach, you may be able to start a class action to collect money for the harm you’ve suffered.

• Keep reading for more information

At A Glance

What's Going On?: Attorneys need to hear from people affected by the MetroWest data breach as they investigate whether a class action lawsuit can be filed.
What You Can Do: If you believe your information may have been compromised in the MetroWest data breach, fill out the form on this page to learn more about the investigation and how you can help.
Does This Cost Anything?: It costs nothing to get in touch or to talk to someone about your rights.
What Can I Get?: If filed and successful, a class action lawsuit could provide consumers with money for any harm resulting from the MetroWest breach.

MetroWest Data Breach: Lawsuit Investigation

Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the MetroWest data breach.

As part of their investigation, they need to hear from individuals who had their information exposed in the incident, including those who received notice of the MetroWest data breach or otherwise believe they are affected.

MetroWest Security Incident: What Happened?

MetroWest Community Federal Credit Union has disclosed a data breach that, according to a report submitted to the Maine Attorney General’s Office, impacted 20,722 individuals.

A sample notice submitted to the Massachusetts Office of Consumer Affairs and Business Regulation (pictured below) states that on September 1, 2025, MetroWest noticed suspicious activity on its network. With the help of third-party forensic specialists, MetroWest discovered that unauthorized access and file copying occurred on September 3.

The investigation revealed that the information compromised in the MetroWest Community Federal Credit Union data breach included names, addresses, financial and payment card details, dates of birth, Social Security numbers, driver’s license numbers, and taxpayer IDs.

MetroWest has mailed notification letters to those affected and posted details about the data breach on its website for those impacted for whom MetroWest did not have addresses.

MetroWest, which is based in Framingham, MA, plans to merge with St. Mary’s Credit Union of Marlborough, MA. The merged entity will retain the St. Mary’s Credit Union name.

What You Can Do After the MetroWest Data Breach

If your information was exposed in the MetroWest data breach, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.

A successful case could also force MetroWest to ensure they take proper steps to protect the information they were entrusted with.

Affected by the MetroWest data breach? Fill out the form on this page today.