Abri Credit Union abricu.com

Abri Credit Union data breach: what happened and what to do

Abri Credit Union said systems were accessed on May 3 and 4, 2024, and it found on December 1, 2025 that they held personal information. Letters began December 30, 2025. Data included Social Security numbers, financial account details and medical information.

View all 13,115 breaches
Breach date
3 May 2024
Data exposed
Names, Dates of birth, Social security numbers, Driver's licenses, Bank account numbers, Credit cards, Medical information, Health insurance information
Last updated

Abri Credit Union is a credit union. At the end of 2025 it told members that an intrusion from more than a year earlier had involved their personal information.

What happened

Abri's website notice says a forensic investigation found that systems accessed on May 3 and 4, 2024 contained personal information. The credit union reached that conclusion on December 1, 2025, and notification letters began on December 30, 2025. The notice went to people whose information may have been in the affected files, to the extent Abri had their contact details. Washington's Attorney General lists the breach.

What was exposed

The notice lists names, dates of birth, Social Security numbers, driver's license or state ID numbers, financial account information, payment card numbers, medical information, health insurance information, digital signatures, and birth or marriage certificates. The mix varies by person.

That is a full identity kit. Account and card numbers invite bank and card fraud. A signature or a birth certificate can help someone pass identity checks. Financial phishing that quotes real details is likely.

The company's response

Abri says it has no evidence the information has been or will be misused as a direct result of the incident. People whose Social Security numbers were in the affected files were offered complimentary credit monitoring. The number of people affected has not been stated in the notices cited here.

What to do if you were in it

  1. 1

    Freeze your credit at all three bureaus

    Freezing your credit at Equifax, Experian and TransUnion stops anyone opening new accounts in your name. It's free and you can lift it when you need credit.

  2. 2

    Ask for new card numbers and watch accounts

    If a card or account number was in your letter, ask Abri or your bank for replacements and review statements often.

  3. 3

    Use the credit monitoring if offered

    If your Social Security number was involved, enroll with the code in your letter before the deadline.

  4. 4

    Be careful with calls and texts about your account

    Don't act on unexpected messages. Call the credit union using a number from its website or your card.

  5. 5

    Check whether your email or phone is in this and other breaches

    A free Serus scan checks breach databases for your email and phone number and tells you what to do about what it finds. Serus can't remove data from a breach, but it alerts you when your details turn up.

Frequently asked

Was I affected by the Abri Credit Union data breach?

Abri mailed letters starting December 30, 2025. If you're a member and got none, contact the credit union.

What was exposed?

Names, dates of birth, Social Security numbers, driver's license numbers, financial account and card numbers, medical and health insurance information, and more, depending on the person.

Why did the notice take so long?

The notice says the intrusion was in May 2024 and the credit union found on December 1, 2025 that the files held personal information.

Is there a settlement?

None of our sources reports one.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Serus

Check if you're exposed in a breach with Serus

Find your leaks. Get alerted to new ones.

Run a free scan

Related guides

All guides

Related articles

All articles

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.