First Harvest Data Breach Impacts Consumers' Personal Information

First Harvest Federal Credit Union, a member-owned financial institution based in Deptford, New Jersey, disclosed a data breach involving unauthorized access to an employee email account.

The breach was disclosed to attorneys general of Maine and Vermont on May 6, 2026.

The credit union first became aware of suspicious activity involving that email account on Feb. 3, 2026. First Harvest launched an investigation into the nature and scope of the incident.

The investigation determined that the unknown actor had potentially accessed certain data contained within the compromised email account on Jan. 14, 2026.

The review conducted to understand what information was exposed concluded on April 17, 2026. The types of personal information that could have been exposed include names, Social Security numbers, financial account information and payment card information.

First Harvest began notifying affected consumers in writing on May 6, 2026.

First Harvest Federal Credit Union's response to the breach

First Harvest is offering affected individuals complimentary access to Experian IdentityWorks credit monitoring for 12 months at no cost. The monitoring service includes a credit report at signup, daily credit reports for online members, active monitoring of the individual's Experian credit file for indicators of fraud, and identity restoration support.

Those who received a notification letter can enroll online at the Experian IdentityWorks enrollment page using the activation code included in their letter. Individuals must enroll by the deadline printed in their letter for the activation code to work.

In addition to offering credit monitoring, First Harvest is providing affected individuals with guidance on placing fraud alerts and security freezes, obtaining free credit reports and reporting identity theft.

Affected individuals with questions about the incident may contact First Harvest Monday through Friday from 9 a.m. to 6:30 p.m. EST, excluding U.S. holidays. They may also write to the credit union at 1617 Hurffville Road, Deptford, NJ 08096.

Steps to take if your information was exposed

• Place a fraud alert or credit freeze. Contact Equifax at 1-888-298-0045, Experian at 1-888-397-3742 or TransUnion at 1-833-799-5355 to restrict access to credit files.
• Review credit reports for unfamiliar activity. Request free annual reports at AnnualCreditReport.com and look for accounts or inquiries that are not recognized.
• Monitor financial account and card statements closely. Check bank and credit card statements regularly for unauthorized transactions, since financial account and payment card data were involved in this breach.
• Be cautious of phishing attempts. Scammers may send emails, calls or texts referencing First Harvest Federal Credit Union or this breach to trick people into sharing more personal information.
• Report suspected identity theft to the FTC. File a complaint at IdentityTheft.gov or call 1-877-438-4338 for guidance on next steps.
• Contact a state attorney general for additional help. Residents of certain states may reach their attorney general's office, including in Washington, D.C., Maryland, New York, North Carolina and Rhode Island.