Connex Credit Union connexcu.org Connex Credit Union data breach: what happened and what to do
Connex Credit Union in Connecticut said files were accessed without authorization on June 2 and 3, 2025. It told Maine's attorney general at least 172,000 people were affected. Names, account numbers, debit card details and Social Security numbers may be exposed.
View all 13,115 breaches- Breach date
- 2 Jun 2025
- Made public
- 7 Aug 2025
- Affected
- 172,000
- Data exposed
- Names, Account numbers, Debit card information, Social security numbers, Government issued IDs
- Last updated
What happened
Connex Credit Union, based in North Haven, Connecticut, detected unusual network activity on June 3, 2025. Its investigation found certain files may have been accessed or downloaded without authorization on June 2 and 3. On July 27 it identified the people whose information may have been involved, and began mailing letters on August 6.
Connex told Maine's attorney general that at least 172,000 people were affected.
What was exposed
The information may include names, account numbers, debit card information, Social Security numbers and other government ID numbers used to open accounts. Connex said it has no reason to believe member accounts or funds were accessed without authorization.
What it means for you
Your Social Security number and ID details can be used to open credit in your name, even if your Connex account is untouched. Account and debit card details add the risk of card fraud and phishing. Connex has warned of scams in which fraudsters impersonate its staff.
The company's response
Connex secured its network, notified the National Credit Union Administration and federal law enforcement, offered 12 months of credit monitoring and identity protection through Cyberscout (a TransUnion company), and set up a call center.
What to do if you were in it
- 1
Freeze your credit
A freeze at Equifax, Experian and TransUnion stops anyone opening new credit in your name. It's free, takes a few minutes per bureau and you can lift it when you need to borrow.
- 2
Take the free monitoring if you were offered it
If Connex sent you a letter with an enrollment code, use it before the deadline. It adds alerts on top of a freeze, it doesn't replace one.
- 3
Read your statements and explanations of benefits
Look for accounts, loans, claims or tax filings you don't recognize, and report them to the lender, insurer or the IRS right away.
- 4
Expect phishing that mentions the breach
Scammers pose as Connex or as a credit monitoring service. Don't click links in unexpected texts or emails, and call the number on the letter or the official website instead.
- 5
Check whether your email or phone is in this and other breaches
A free Serus scan shows where your email address and phone number have appeared in known breaches and tells you what to do next.
- 6
Ask your credit union about a new debit card
If your debit card information was in the notice, ask Connex whether to replace the card and watch your transactions.
Frequently asked
Was I affected?
Connex began mailing letters on August 6, 2025. At least 172,000 people were affected. If you were a member and haven't received one, contact Connex.
What was exposed?
Names, account numbers, debit card information, Social Security numbers and other government ID numbers used to open accounts.
Were my accounts accessed?
Connex said it has no reason to believe the incident involved unauthorized access to member accounts or funds.
Should I change my password?
The notice doesn't list passwords. If you want extra safety, change your online banking password and turn on 2FA.
Sources
- bankingdive.com/news/connex-credit-union-connecticut-data-breach-cyber/757822/
- bleepingcomputer.com/news/security/connex-credit-union-discloses-data-breach-impacting-172-000-people/
- cutimes.com/amp/2025/08/11/connex-credit-union-reports-data-security-incident/
- oag.ca.gov/system/files/Connex%20-%20Sample%20Notice.pdf
- oag.ca.gov/privacy/databreach/list
Something wrong or out of date? Tell us and we'll re-check it.
