OE Federal Credit Union Data Breach Lawsuit Filed Over 2023 Cyberattack

New to ClassAction.org? Read our Newswire Disclaimer

A proposed class action lawsuit has been filed against OE Federal Credit Union over a two-month 2023 data breach in which clients’ personally identifiable information was allegedly compromised by “malicious cybercriminals.”

Did you receive a data breach notice from OE Federal Credit Union? Let us know here.

The 65-page OE Federal Credit Union data breach lawsuit says that the incident occurred between August 19, 2023 and October 29, 2023 and stemmed from the credit union’s failure to properly monitor the computer network and IT systems in which consumers’ information was held. The suit calls the OE Federal Credit Union data breach “particularly heinous” given that the incident reportedly lasted for more than two months before being detected.

The case shares that OE Federal did not begin to notify data breach victims until April 2024.

According to the complaint, consumers’ full names, Social Security numbers, and driver’s license or government ID numbers were among the unencrypted data compromised in the OE Federal Credit Union cyberattack. The lawsuit argues that OE Federal Credit Union’s offer of complimentary 12-month Experian IdentityWorks membership to data breach victims is “tacet acknowledgement” of the heightened risk of identity theft and fraud consumers face due to the incident.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

“Defendant maintained the [personally identifiable information] in a negligent and/or reckless manner,” the data breach lawsuit alleges. “In particular, the [information] was maintained on Defendant’s computer system and network in a condition vulnerable to cyberattacks.”

The filing relays that OE Federal is the largest labor-based credit union nationwide and is obligated by law to safeguard the sensitive personal data it collects in the course of business. Despite this, OE Federal detected “unauthorized access” to its network in late October of last year and learned upon investigation that certain files containing personal information were impacted over a more than two-month period in 2023.

According to the case, ransomware group NoEscape has claimed credit for the OE Federal data breach, which the suit calls a “foreseeable risk” for the defendant.

The OE Federal data breach lawsuit looks to cover all persons identified by the credit union as among those affected by the data breach, including those who were sent notice from OE Federal Credit Union about the incident.

Did you receive a data breach notice from OE Federal Credit Union? Let us know here.