One Community Federal Credit Union Data Breach Exposes SSNs

One Community Federal Credit Union, a member-owned credit union based in Parkersburg, West Virginia, disclosed a data breach that occurred in July 2026.

The breach was disclosed to the Massachusetts Office of Consumer Affairs and Business Regulation on Oct. 27, 2026. The credit union also posted a notice on its website.

Between July 7, 2026, and July 13, 2026, an unauthorized third party accessed the credit union's network and may have viewed or acquired certain files.

On Sept. 18, 2026, a review of the affected files confirmed that they contained personal information belonging to certain individuals. The types of information exposed included names, Social Security numbers and financial account information.

The attack also caused a service outage that disrupted certain aspects of the credit union's systems. According to an update the credit union posted on July 15, 2026, virtual branch online banking, mobile banking and ATMs remained available during the outage.

A ransomware group known as DragonForce claimed responsibility for the attack. On July 21, 2026, the group posted on the Tor network that it had obtained 111.26 GB of the credit union's data and intended to publish it within seven days.

One Community Federal Credit Union's response to the breach

The credit union is offering a complimentary membership in Experian IdentityWorks Credit 3B. Affected individuals can enroll at the Experian IdentityWorks website using the activation code provided in their notification letter.

Affected individuals who have questions can call the dedicated support line referenced in their notification letter, available from 9 a.m. to 9 p.m. EST, Monday through Friday.