Abri Credit Union data breach: what happened and what to do
Abri Credit Union said systems were accessed on May 3 and 4, 2024, and it found on December 1, 2025 that they held personal information. Letters began December 30, 2025. Data included Social Security numbers, financial account details and medical information.
View all 13,115 breaches- Breach date
- 3 May 2024
- Data exposed
- Names, Dates of birth, Social security numbers, Driver's licenses, Bank account numbers, Credit cards, Medical information, Health insurance information
- Last updated
Abri Credit Union is a credit union. At the end of 2025 it told members that an intrusion from more than a year earlier had involved their personal information.
What happened
Abri's website notice says a forensic investigation found that systems accessed on May 3 and 4, 2024 contained personal information. The credit union reached that conclusion on December 1, 2025, and notification letters began on December 30, 2025. The notice went to people whose information may have been in the affected files, to the extent Abri had their contact details. Washington's Attorney General lists the breach.
What was exposed
The notice lists names, dates of birth, Social Security numbers, driver's license or state ID numbers, financial account information, payment card numbers, medical information, health insurance information, digital signatures, and birth or marriage certificates. The mix varies by person.
That is a full identity kit. Account and card numbers invite bank and card fraud. A signature or a birth certificate can help someone pass identity checks. Financial phishing that quotes real details is likely.
The company's response
Abri says it has no evidence the information has been or will be misused as a direct result of the incident. People whose Social Security numbers were in the affected files were offered complimentary credit monitoring. The number of people affected has not been stated in the notices cited here.
What to do if you were in it
- 1
Freeze your credit at all three bureaus
Freezing your credit at Equifax, Experian and TransUnion stops anyone opening new accounts in your name. It's free and you can lift it when you need credit.
- 2
Ask for new card numbers and watch accounts
If a card or account number was in your letter, ask Abri or your bank for replacements and review statements often.
- 3
Use the credit monitoring if offered
If your Social Security number was involved, enroll with the code in your letter before the deadline.
- 4
Be careful with calls and texts about your account
Don't act on unexpected messages. Call the credit union using a number from its website or your card.
- 5
Check whether your email or phone is in this and other breaches
A free Serus scan checks breach databases for your email and phone number and tells you what to do about what it finds. Serus can't remove data from a breach, but it alerts you when your details turn up.
Frequently asked
Was I affected by the Abri Credit Union data breach?
Abri mailed letters starting December 30, 2025. If you're a member and got none, contact the credit union.
What was exposed?
Names, dates of birth, Social Security numbers, driver's license numbers, financial account and card numbers, medical and health insurance information, and more, depending on the person.
Why did the notice take so long?
The notice says the intrusion was in May 2024 and the credit union found on December 1, 2025 that the files held personal information.
Is there a settlement?
None of our sources reports one.
Sources
Something wrong or out of date? Tell us and we'll re-check it.