TDECU Data Breach Affects 500,000 Members; Cl0p Ransomware Group Involved
Texas Dow Employees Credit Union (TDECU) has announced a significant data breach affecting over 500,000 members. The breach, involving the MOVEit file transfer software, was orchestrated by the Cl0p ransomware group and first identified in May 2023. However, it was only discovered in July 2024, and members are now being notified.
The breach, which occurred over a year ago, compromised sensitive information including names, dates of birth, social security numbers, bank account and credit card numbers, driver's license numbers, and taxpayer identification numbers. TDECU started notifying affected members on August 23, 2024, and is offering complimentary credit monitoring services to those whose social security numbers were compromised.
The breach was isolated to files transferred via MOVEit, and TDECU's internal network security remained intact. However, the repercussions could persist for months or even years, with stolen data potentially surfacing on the dark web or being used in targeted attacks. Companies are urged to conduct thorough audits of data transferred through MOVEit or similar services to understand what sensitive information might have been exposed.
The MOVEit breach at TDECU serves as a stark reminder of the high stakes involved in data security breaches. With over 20 million individuals affected globally, ransomware remains one of the most pervasive and damaging threats in 2024. TDECU members affected by the breach are advised to monitor their accounts and take advantage of the complimentary credit monitoring services offered.
Read also:
- Thieves Steal Unique Sculptures from Redwood National Park's Grove of Titans
- Thessaly's Climate Plan Stalls Two Years After Storm Daniel Devastation
- International powers, including France, Germany, and the UK, advocate for the reinstatement of sanctions against Iran.
- Companies urged to combat employee resignation crisis, as per findings from the Addeco Group