West Virginia based Fairmont Federal Credit Union (FFCU) experienced a data security incident impacting its systems. FFCU discovered the data breach on January 23, 2024 and an investigation revealed the cybersecurity incident compromised both personally identifiable information (PII) and protected health information (PHI).
The data breach affected 187,038 individuals. The detail of personal information compromised indicates potential for substantial impact, putting credit union customers and employees at risk of identity theft and financial fraud. FFCU began notifying affected individuals on Sept. 11, 2025.
Exposed information may include names, date of birth, Social Security number, U.S. Alien registration number, passport number, driver’s license or state ID number, military ID number, Tax ID number, non-U.S. national identification number, financial account number, routing number, financial institution name, credit card/debit card number, security code/PIN number, credit card/debit card expiration date, IRS PIN number, treatment information/diagnosis, prescription information, provider name, MRN/patient ID, Medicare/Medicaid number, health insurance policy/subscriber number, other health insurance information, treatment cost information, full access credentials, security questions and answers, and digital signatures.
Fairmont Federal Credit Union published a Notice of Data Security Incident on its own website. The data breach was also disclosed to the California Attorney General's office, Maine Attorney General, Montana Attorney General and Massachusetts Attorney General on Sept. 11, 2025.
The incident was subsequently reported to the Texas Attorney General on Sept. 12, 2025. Impacted credit union customers include 1,206 in Texas, 38 in Montana and 53 in each of Maine and Massachusetts.
After discovering the data breach, Fairmont Federal Credit Union secured its systems and initiated a review. FFCU is providing free Experian IndentityWorks credit monitoring services to all affected individuals..
Fairmont Federal Credit Union has set up a toll-free response line for affected customers and employees with questions at 888-562-7091, available Monday through Friday from 9:00 a.m. to 9:00 p.m. Eastern Time.
If you believe your personal or protected health information may have been compromised in this breach:
For more information about the credit union, visit the Fairmont Federal Credit Union website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.