The Texas Dow Employees Credit Union (TDECU) has filed a data breach notification, following a data breach in which the PII of 500,474 people has been accessed in an external system breach.
TDECU is the largest Houston-area credit union and the fourth largest in the state of Texas. As per the data breach notification: The breach occurred on May 29, 2023, but wasn’t discovered until July 30, 2024.
TDECU has sent notifications to those individuals who have been affected. In this notification and on its website, TDECU explained that the incident was related to the MOVEit vulnerability that impacted many other organizations last year.The vulnerability also allowed the attackers to view or take certain TDECU data.
After learning of the vulnerability, TDECU launched an investigation and found that certain files containing personal information of TDECU members were potentially stolen from MOVEit by cybercriminals between May 29 and 31, 2023.
Affected individuals are being offered complimentary access to identity monitoring for 12 months.
The credit union clarified that there have been no reported cases of identity or financial fraud related to the incident. However, they advise members to remain vigilant and take proactive steps to protect themselves.
Regular security audits, vulnerability assessments, and employee training are essential to effectively mitigate the risk of data breaches and protect data.
