Fairmont Federal Credit Union (FFCU), a West Virginia-based financial institution, experienced a data security incident impacting its systems. FFCU discovered the data breach on January 23, 2024 and an investigation revealed the cybersecurity incident compromised both personally identifiable information (PII) and protected health information (PHI).
Exposed information may include names, date of birth, Social Security number, U.S. Alien registration number, passport number, driver’s license or state ID number, military ID number, Tax ID number, non-U.S. national identification number, financial account number, routing number, financial institution name, credit card/debit card number, security code/PIN number, credit card/debit card expiration date, IRS PIN number, treatment information/diagnosis, prescription information, provider name, MRN/patient ID, Medicare/Medicaid number, health insurance policy/subscriber number, other health insurance information, treatment cost information, full access credentials, security questions and answers, and digital signatures.
FFCU has not yet disclosed the exact number of individuals affected, but the detail of personal information compromised indicates potential for substantial impact. Fairmont Federal Credit Union published a Notice of Data Security Incident on its own website.
After discovering the data breach, Fairmont Federal Credit Union secured its systems and initiated a review. FFCU is providing free credit monitoring to affected individuals concerned about Social Security number impact.
Fairmont Federal Credit Union has set up a toll-free response line for affected customers and employees with questions at 888-562-7091, available Monday through Friday from 9:00 a.m. to 9:00 p.m. Eastern Time.
If you believe your personal or protected health information may have been compromised in this breach:
For more information about the credit union, visit the Fairmont Federal Credit Union website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.