On June 2, 2025, one of Connecticut’s largest credit unions, Connex Credit Union, disclosed a data breach that has impacted 172,000
individuals in the United States.
According to disclosures filed with the California Attorney General and Texas Attorney General, the breach occurred when unauthorized actors accessed and downloaded files from Connex’s cyber environment between June 2 and June 3, 2025. The breach was discovered on June 3, 2025, when unusual activity was detected, prompting an immediate investigation with the help of independent cybersecurity experts.
According to the disclosure filed with the Maine Attorney General, approximately 172,000 have been affected.
The investigation determined that the compromised information included a range of personally identifiable information (PII): names, account numbers, Social Security numbers, and other government-issued identification used to open accounts, such as state ID cards.
Connex Credit Union notified affected consumers by U.S. mail beginning Aug. 6, 2025, and completed its review of the incident on July 27, 2025. The breach has been formally reported to both state and federal authorities, including the National Credit Union Administration, as required by law.
Connex is offering complimentary Single Bureau Credit Monitoring, Credit Report, and Credit Score services for one year through Cyberscout for those who have been affected. These services provide alerts for any changes to a credit file, helping members stay vigilant about their financial security. Affected individuals must enroll within 90 days of receiving their notification letter to take advantage of these services.
Connex also recommends that all members remain vigilant for suspicious communications, regularly review account statements and credit reports, and consider placing a fraud alert or security freeze on their credit files. The credit union has provided a dedicated phone line through Cyberscout at 833-380-4364 for questions and support.
Additional resources and best practices for protecting personal information are available on the Connex Credit Union Security Center.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.